CVEvulnerability
CVE-2008-6656
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-04-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.
Affected configurations
• openautoclassifieds open auto classifieds 1.4.3b
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://freshmeat.net/projects/openauto/releases/277061 freshmeat.net
- http://osvdb.org/50255 osvdb.org
- http://osvdb.org/50256 osvdb.org
- http://www.securityfocus.com/bid/29027 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42158 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5531 www.exploit-db.com
- http://freshmeat.net/projects/openauto/releases/277061 freshmeat.net
- http://osvdb.org/50255 osvdb.org
- http://osvdb.org/50256 osvdb.org
- http://www.securityfocus.com/bid/29027 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42158 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5531 www.exploit-db.com