Smartisoft: >> Phpbazar >> 2.1.1 Security Vulnerabilities
PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter.
CVSS Score
7.5
EPSS Score
0.005
Published
2010-06-17
SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767.
CVSS Score
7.5
EPSS Score
0.004
Published
2009-12-07