GCVE - cpe:2.3:a:deltascripts:php_classifieds:6.04:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:deltascripts:php_classifieds:6.04:*:*:*:*:*:*:*

part: a version: 6.04 update: *

Vendor	Deltascripts (`d6470cba-31a1-5133-9401-829f12d60788`)
Product	Php Classifieds (`572e3364-e92a-5d76-964c-53c43d1e389c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5806`	vulnerable	2026-06-08 04:50:53.159814	Details available SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party information. Published: 2008-12-31T11:00:00.000Z Updated: 2024-08-07T11:04:44.572Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/48317 http://securityreason.com/securityalert/4837 http://secunia.com/advisories/32586 http://www.securityfocus.com/bid/32161 https://www.exploit-db.com/exploits/7023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5805`	vulnerable	2026-06-08 04:50:53.154017	Details available SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828. Published: 2008-12-31T11:00:00.000Z Updated: 2024-08-07T11:04:44.592Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32161 https://exchange.xforce.ibmcloud.com/vulnerabilities/46428 http://www.securityfocus.com/bid/32191 https://www.exploit-db.com/exploits/7047 http://www.vupen.com/english/advisories/2008/3079	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2254`	vulnerable	2026-06-08 04:49:44.523275	Details available PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure. Published: 2007-04-25T17:00:00.000Z Updated: 2024-08-07T13:33:28.373Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/466648/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/33798 http://www.attrition.org/pipermail/vim/2007-April/001543.html http://securityreason.com/securityalert/2618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3330`	vulnerable	2026-06-08 04:49:08.924877	Details available Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php. Published: 2006-06-30T23:00:00.000Z Updated: 2024-08-07T18:23:21.184Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/18717 http://secunia.com/advisories/20880 https://exchange.xforce.ibmcloud.com/vulnerabilities/27454 http://www.securityfocus.com/bid/18713 http://www.securityfocus.com/archive/1/438667/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3329`	vulnerable	2026-06-08 04:49:08.924436	Details available SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter. Published: 2006-06-30T23:00:00.000Z Updated: 2024-08-07T18:23:21.182Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/18713 http://www.securityfocus.com/archive/1/438667/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/27453 http://securitytracker.com/id?1016407 http://securityreason.com/securityalert/1179	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.