Vulnerabilities

TI-2009-03072 CVE-2009-3227 · GHSA-x3c4-8cgr-5j45

Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds…

LOW 22

Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city p…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01097 Published 2009-09-16 No fix listed CWE-79

TI-2009-03071 CVE-2009-3226 · GHSA-5r4q-84cw-cpwc

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise…

LOW 35

SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a ma…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01133 Published 2009-09-16 No fix listed CWE-89

TI-2009-03070 CVE-2009-3225 · GHSA-88g5-782g-r7xp

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01511 Published 2009-09-16 No fix listed CWE-79

TI-2009-03000 CVE-2009-3155 · GHSA-3wmj-6h74-prmg

Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds…

LOW 23

Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01436 Published 2009-09-10 No fix listed CWE-79

TI-2009-02999 CVE-2009-3154 · GHSA-xh8q-gjf3-g988

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for…

LOW 35

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action to index.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2009-09-10 No fix listed CWE-89

TI-2009-02453 CVE-2009-2567 · GHSA-q8f5-jfgc-wgv5

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for…

LOW 35

SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00907 Published 2009-07-22 No fix listed CWE-89

TI-2005-04057 CVE-2005-4313 · GHSA-87hq-4572-qw4h

SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows…

LOW 36

SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01333 Published 2005-12-17 No fix listed

TI-2005-03535 CVE-2005-3741 · GHSA-q7cm-hp8h-fqvw

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.

LOW 35

Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01146 Published 2005-11-22 No fix listed

Vulnerabilities

Filters