Vulnerabilities > Phpoutsourcing > Noahs Classifieds > High

DATE CVE VULNERABILITY TITLE RISK
2006-02-24 CVE-2006-0881 Remote File Include vulnerability in Noah's Classifieds
Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to include arbitrary PHP files via the (1) upperTemplate and (2) lowerTemplate parameters, as demonstrated using the lowerTemplate parameter to index.php.
network
low complexity
phpoutsourcing
7.5
2006-02-24 CVE-2006-0879 SQL Injection vulnerability in Noah's Classifieds Search Page
SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
network
low complexity
phpoutsourcing
7.5