Vulnerabilities > Phpoutsourcing > Noahs Classifieds > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-02-24 | CVE-2006-0881 | Remote File Include vulnerability in Noah's Classifieds Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to include arbitrary PHP files via the (1) upperTemplate and (2) lowerTemplate parameters, as demonstrated using the lowerTemplate parameter to index.php. | 7.5 |
2006-02-24 | CVE-2006-0879 | SQL Injection vulnerability in Noah's Classifieds Search Page SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors. | 7.5 |