Vulnerabilities

TI-2017-12840 CVE-2017-17569 · GHSA-5j49-mgww-92r6

Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.

LOW 28

Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00669 Published 2017-12-13 No fix listed CWE-79

TI-2017-12839 CVE-2017-17568 · GHSA-5q6p-5c2h-f5h7

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting…

LOW 36

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct re…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01384 Published 2017-12-13 No fix listed CWE-732

TI-2017-12838 CVE-2017-17567 · GHSA-cj3x-22w4-268g

Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.

LOW 35

Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01145 Published 2017-12-13 No fix listed CWE-89

TI-2017-12561 CVE-2017-17111 · GHSA-7554-5j9w-c8h2

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a…

MEDIUM 53

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.088 Published 2017-12-11 No fix listed CWE-89

Vulnerabilities

Filters

Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting…

Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a…