high7.5Public exploit code
CVE-2008-1272
Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BM Classifieds 20080409 - Multiple SQL Injections2008-03-09 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmscripts | Bm Classifieds | through 20080309 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29297
- http://www.securityfocus.com/bid/28159
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41066
- https://www.exploit-db.com/exploits/5223
- http://secunia.com/advisories/29297
- http://www.securityfocus.com/bid/28159
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41066
- https://www.exploit-db.com/exploits/5223