CVE-2008-1272 | BDVDB-2026-29655 Detail

Description#

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/28159
https://www.exploit-db.com/exploits/5223
http://secunia.com/advisories/29297
https://exchange.xforce.ibmcloud.com/vulnerabilities/41066

Exploit#

https://www.exploit-db.com/exploits/5223

History#

Version 12008-03-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.