GCVE - cpe:2.3:a:deltascripts:php_classifieds:6.20:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:deltascripts:php_classifieds:6.20:*:*:*:*:*:*:*

part: a version: 6.20 update: *

Vendor	Deltascripts (`d6470cba-31a1-5133-9401-829f12d60788`)
Product	Php Classifieds (`572e3364-e92a-5d76-964c-53c43d1e389c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5806`	vulnerable	2026-06-08 04:50:53.159871	Details available SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party information. Published: 2008-12-31T11:00:00.000Z Updated: 2024-08-07T11:04:44.572Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/48317 http://securityreason.com/securityalert/4837 http://secunia.com/advisories/32586 http://www.securityfocus.com/bid/32161 https://www.exploit-db.com/exploits/7023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5805`	vulnerable	2026-06-08 04:50:53.156466	Details available SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828. Published: 2008-12-31T11:00:00.000Z Updated: 2024-08-07T11:04:44.592Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32161 https://exchange.xforce.ibmcloud.com/vulnerabilities/46428 http://www.securityfocus.com/bid/32191 https://www.exploit-db.com/exploits/7047 http://www.vupen.com/english/advisories/2008/3079	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5828`	vulnerable	2026-06-08 04:49:21.396020	Details available SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Published: 2006-11-10T01:00:00.000Z Updated: 2024-08-07T20:04:55.557Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30023 http://www.securityfocus.com/bid/20935 https://www.exploit-db.com/exploits/2720 http://www.vupen.com/english/advisories/2006/4403 http://secunia.com/advisories/22704	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1532`	vulnerable	2026-06-08 04:48:57.415009	Details available Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. Published: 2006-03-30T11:00:00.000Z Updated: 2024-08-07T17:12:22.338Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17305 http://www.vupen.com/english/advisories/2006/1143 http://secunia.com/advisories/19440 http://osvdb.org/ref/24/24232-php_classifieds.txt http://www.osvdb.org/24232	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0719`	vulnerable	2026-06-08 04:48:55.042281	Details available SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter. Published: 2006-02-15T22:00:00.000Z Updated: 2024-08-07T16:48:55.325Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/424955/100/0/threaded http://www.vupen.com/english/advisories/2006/0600 http://secunia.com/advisories/18881 http://securityreason.com/securityalert/424 http://www.securityfocus.com/bid/16642	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.