Unrated severityNVD Advisory· Published Apr 7, 2009· Updated Apr 23, 2026

CVE-2008-6656

Description

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to listings.php and (2) the username field to login.php.

Affected products

Openautoclassifieds/Open Auto Classifieds
cpe:2.3:a:openautoclassifieds:open_auto_classifieds:1.4.3b:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/29027nvdExploit
freshmeat.net/projects/openauto/releases/277061nvd
osvdb.org/50255nvd
osvdb.org/50256nvd
exchange.xforce.ibmcloud.com/vulnerabilities/42158nvd
www.exploit-db.com/exploits/5531nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000