Search vulnerabilities

Results 2

Export CSV
CVE-2008-6656

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
CVE-2003-1145

Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.

CVSS 2.0 · 6.8 Medium EPSS 4.2% KEV · Not listed