CVE-2013-7216 in Classifieds Creatorinfo

Summary

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to demo/classifieds/product.asp, or (2) UserID or (3) Password field to demo/classifieds/admin.asp.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

12/24/2013

Disclosure

12/24/2013

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!