VYPR

Online Classified Script

by 2daybiz

CVEs (2)

  • CVE-2010-5019Nov 2, 2011
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.

  • CVE-2010-5018Nov 2, 2011
    risk 0.03cvss epss 0.03

    Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter.