CVE-2017-17623

概要

参考情報

• packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43292 · Exploit

opensource classified ads script のその他の脆弱性

• CVE-2019-7437中 6.1PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.
• CVE-2019-7436中 6.5PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory.
• CVE-2019-7435中 5.3PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.