CVEvulnerability
CVE-2008-1272
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.
Affected configurations
• bmscripts bm classifieds (<= 20080309)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29297 secunia.com
- http://www.securityfocus.com/bid/28159 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41066 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5223 www.exploit-db.com
- http://secunia.com/advisories/29297 secunia.com
- http://www.securityfocus.com/bid/28159 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41066 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5223 www.exploit-db.com