| Package | Affected versions | Patched versions |
|---|---|---|
| phpbazar | = 2.0.2= 2.1.0= 2.1.1≤ 2.1.1fix |
SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free