high7.5Public exploit code
CVE-2008-6656
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to lis…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Open Auto Classifieds 1.4.3b - SQL Injection2008-05-02 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openautoclassifieds | Open Auto Classifieds | Version 1.4.3b |
Weakness classification
References
- NVD record
- CVE.org record
- http://freshmeat.net/projects/openauto/releases/277061
- http://osvdb.org/50255
- http://osvdb.org/50256
- http://www.securityfocus.com/bid/29027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42158
- https://www.exploit-db.com/exploits/5531
- http://freshmeat.net/projects/openauto/releases/277061
- http://osvdb.org/50255
- http://osvdb.org/50256
- http://www.securityfocus.com/bid/29027
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42158
- https://www.exploit-db.com/exploits/5531