Vulnerabilities

TI-2006-06512 CVE-2006-6768 · GHSA-686w-wf63-h9pr

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01761 Published 2006-12-27 No fix listed

TI-2006-06098 CVE-2006-6349 · GHSA-mv6g-5cxg-mv5m

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow…

LOW 37

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via (1) the main parameter in a view action (includes/mainpage/view.asp) in def…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02076 Published 2006-12-07 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies…

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow…