CVE-2003-1520

Fuzzymonkey Myclassifieds - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Ezhilan · textwebappsphp
https://www.exploit-db.com/exploits/23269

References (4)

Core 4
Core References
Exploit, Patch mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/341908
Exploit, Patch third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3293
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/8863

Scores

EPSS 0.0121
EPSS Percentile 79.1%

Details

CWE
CWE-89
Status published
Products (1)
fuzzymonkey/myclassifieds 2.11
Published Dec 31, 2003
Tracked Since Feb 18, 2026