CVE-2008-2453 Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to (1) browse.php and (2) search.php.
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to (1) browse.php and (2) search.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpclassifiedsscript php classifieds script | All versions | No fix listed |
References
- 30209 third-party-advisory vendor-advisory
- 29169 exploit vdb-entry
- phpclassifiedsscript-fatherid-sql-injection(42380) vdb-entry
- 5599 exploit