Opensource Classified Ads Script Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Opensource Classified Ads Script Project records in CISA KEV

No Opensource Classified Ads Script Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Opensource Classified Ads Script · all components

TI-2017-12894 CVE-2017-17623 · GHSA-44cq-5rh2-4m77

MEDIUM 48

Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89

TI-2019-05296 CVE-2019-7436 · GHSA-c7cq-rpjm-74hm

LOW 32

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01366 Published 2019-03-20 No fix listed CWE-200

TI-2019-05297 CVE-2019-7437 · GHSA-7gm9-229q-r3w7

LOW 29

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00848 Published 2019-03-20 No fix listed CWE-79

TI-2019-05295 CVE-2019-7435 · GHSA-rm32-gmh9-v83f

LOW 26

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01043 Published 2019-03-20 No fix listed CWE-79