PT-2006-4223 · Unknown · Php/Mysql Classifieds

Luny · Publicado 2006-06-30 · Atualizado 2018-10-18 · CVE-2006-3330

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP/MySQL Classifieds (affected versions not specified)

Description The issue is related to a cross-site scripting (XSS) vulnerability in the AddAsset1.php file. This vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating certain parameters, including the ProductName ("Title" field), url, and Description parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3330

Produtos afetados

Php/Mysql Classifieds

Referências · 9

• http://vupen.com/english/advisories/2006/2589 · Nota
• http://securityfocus.com/archive/1/438667/100/0/threaded · Nota
• http://securityfocus.com/bid/18717 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3330 · Nota de Segurança
• http://securityfocus.com/bid/18713 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27454 · Nota
• http://secunia.com/advisories/20880 · Aviso do Fabricante
• http://securitytracker.com/id?1016407 · Nota
• http://securityreason.com/securityalert/1179 · Nota