CVE-2003-1520

Fuzzymonkey Myclassifieds - SQL Injection

Title source: rule

Description

SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Ezhilan · textwebappsphp

https://www.exploit-db.com/exploits/23269

View Code ZIP pw:eip

References (4)

[Exploit, Patch] http://securityreason.com/securityalert/3293

[Exploit, Patch] http://www.securityfocus.com/archive/1/341908

[Exploit, Patch] http://www.securityfocus.com/bid/8863

[Various Sources] http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes

Scores

EPSS 0.0121

EPSS Percentile 78.7%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

fuzzymonkey/myclassifieds

Timeline

Published Dec 31, 2003

Tracked Since Feb 18, 2026