Vulnerabilities

TI-2008-01176 CVE-2008-1224 · GHSA-rprv-pfjp-pp8x

Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads…

LOW 22

Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attackers to inject arbitrary web script or HTML via the returnTo parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-03-10 No fix listed CWE-79

TI-2006-03419 CVE-2006-3527 · GHSA-qh49-jr9r-c9mg

Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow…

MEDIUM 40

Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent.php, (3) account.ph…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04272 Published 2006-07-12 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads…

Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow…