CVE-2017-17623

Description

References

• packetstormsecurity.com/files/145335/Opensource-Classified-Ads-Script-3.2-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43292 · Exploit

opensource classified ads script 的其他漏洞

• CVE-2019-7437中危 6.1PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.
• CVE-2019-7436中危 6.5PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory.
• CVE-2019-7435中危 5.3PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.