CVE-2005-3978 Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary...
HighCVSS 7.5
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scriptdevelopers.net netclassifieds | = 1.0.1 | No fix listed |
| scriptdevelopers.net netclassifieds | = 1.5.1 | No fix listed |
| scriptdevelopers.net netclassifieds | = 1.9.6.3 | No fix listed |
References
- pridels0.blogspot.com
- 17853 third-party-advisory vendor-advisory
- 21378 exploit vdb-entry
- 21379 vdb-entry
- 21380 vdb-entry
- 15683 exploit vdb-entry
- ADV-2005-2689 vdb-entry