Vulnerability Details CVE-2003-1520
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.3%
CVSS Severity
CVSS v2 Score 6.8
References
- http://securityreason.com/securityalert/3293
- http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes
- http://www.securityfocus.com/archive/1/341908
- http://www.securityfocus.com/bid/8863
- http://securityreason.com/securityalert/3293
- http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes
- http://www.securityfocus.com/archive/1/341908
- http://www.securityfocus.com/bid/8863
Products affected by CVE-2003-1520
-
cpe:2.3:a:fuzzymonkey:myclassifieds:2.11