Online Classified Script

DATE	CVE	VULNERABILITY TITLE	RISK
2011-11-02	CVE-2010-5019	SQL Injection vulnerability in 2Daybiz Online Classified Script SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter. network low complexity 2daybiz CWE-89	7.5
2011-11-02	CVE-2010-5018	Cross-Site Scripting vulnerability in 2Daybiz Online Classified Script Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter. network 2daybiz CWE-79	4.3