CVE-2005-3978 | BDVDB-2026-13747 Detail

Description#

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/17853
http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html
http://www.osvdb.org/21380
http://www.osvdb.org/21378
http://www.osvdb.org/21379
http://www.securityfocus.com/bid/15683
http://www.vupen.com/english/advisories/2005/2689

Exploit#

No public exploit known

History#

Version 12005-12-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.