Vulnerabilities

TI-2010-04637 CVE-2010-4914 · GHSA-342v-j2x2-9wrp

PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP…

LOW 37

PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02052 Published 2011-10-08 No fix listed CWE-94

TI-2008-05512 CVE-2008-5806 · GHSA-j68v-4fgm-23fp

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier…

LOW 35

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2008-12-31 No fix listed CWE-89

TI-2008-05511 CVE-2008-5805 · GHSA-3h7v-p5q7-mcrq

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier…

LOW 35

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00997 Published 2008-12-31 No fix listed CWE-89

TI-2007-02172 CVE-2007-2254 · GHSA-4p2p-6cv5-fxv8

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds…

LOW 36

PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01356 Published 2007-04-25 No fix listed

TI-2006-05612 CVE-2006-5828 · GHSA-8g6m-qrhh-9r45

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier…

LOW 35

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01115 Published 2006-11-10 No fix listed

TI-2006-05331 CVE-2006-5520 · GHSA-m86f-7wg4-pw39

PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds…

LOW 36

PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the set_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0148 Published 2006-10-26 No fix listed

TI-2006-05024 CVE-2006-5208 · GHSA-6v2c-8r55-2hp7

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01244 Published 2006-10-09 No fix listed

TI-2006-03228 CVE-2006-3330 · GHSA-g2xc-hfw2-2p7h

Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP…

LOW 33

Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Des…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01523 Published 2006-06-30 No fix listed

TI-2006-03227 CVE-2006-3329 · GHSA-73x4-xw4q-8wp7

SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds)…

LOW 35

SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01123 Published 2006-06-30 No fix listed

TI-2006-01482 CVE-2006-1532 · GHSA-85cj-7x2f-prrj

Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and…

LOW 23

Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01296 Published 2006-03-30 No fix listed

TI-2006-00698 CVE-2006-0719 · GHSA-345r-r6r2-x4x2

SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20…

LOW 35

SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01274 Published 2006-02-15 No fix listed

TI-2002-01621 CVE-2002-1702 · GHSA-7mrj-j2vp-hhpc

Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows…

LOW 24

Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01733 Published 2005-06-21 No fix listed

Vulnerabilities

Filters