Approved changes feed: RSS · Atom

cpe:2.3:a:enthrallweb:eclassifieds:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnthrallweb (ed979326-6cbd-588e-bcaa-f8b52f940e09)
ProductEclassifieds (aaa9b3af-7a5e-5d94-9e7e-971a1d32c9b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6822 vulnerable 2026-06-08 04:49:29.793697 Details available
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter.
Published: 2006-12-29T11:00:00.000Z
Updated: 2024-08-07T20:42:06.945Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6208 vulnerable 2026-06-08 04:49:22.293401 Details available
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp.
Published: 2006-12-01T01:00:00.000Z
Updated: 2024-08-07T20:19:35.114Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.