opensource classified ads script vulnerabilities and fixes

Recent CVEs affecting opensource classified ads script, with upgrade or downgrade steps. 4 tracked.

Also searched as: opensourceclassifiedadsscript.

opensource classified ads script has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-21. Highest priority: CVE-2017-17623 (score 66/100).

• CVE-2019-7437 MEDIUM 6.1 DOWNGRADE PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Searc
• CVE-2019-7436 MEDIUM 6.5 DOWNGRADE PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a lis
• CVE-2019-7435 MEDIUM 5.3 DOWNGRADE PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.
• CVE-2017-17623 CRITICAL 9.8 DOWNGRADE Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.

FAQ

How do I fix opensource classified ads script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is opensource classified ads script being exploited right now?

None of the tracked opensource classified ads script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which opensource classified ads script CVE should I patch first?

CVE-2017-17623 currently ranks highest (66/100): Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter..

RSS feed for opensource classified ads script · ← Back to latest CVEs