CVE-2008-6656 | BDVDB-2026-35986 Detail

Description#

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/50255
https://exchange.xforce.ibmcloud.com/vulnerabilities/42158
http://www.securityfocus.com/bid/29027
http://osvdb.org/50256
https://www.exploit-db.com/exploits/5531
http://freshmeat.net/projects/openauto/releases/277061

Exploit#

https://www.exploit-db.com/exploits/5531

History#

Version 12009-04-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.