CVE-2007-6566 SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php.
HighCVSS 7.5
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xzero scripts xzero community classifieds | = 4.95.11 | No fix listed |
References
- en.rstzone.org
- 39740 vdb-entry
- 28250 third-party-advisory
- 20071227 XZero Community Classifieds <= v4.95.11 LFI & SQL Injection mailing-list
- 27042 exploit vdb-entry
- xzero-index-post-sql-injection(39259) vdb-entry
- 4794 exploit