Smartisoft

9 CVEs across 2 Smartisoft products. Browse Smartisoft vulnerabilities, severities, and proof-of-concept exploits.

Smartisoft products with known CVEs

ProductCVEs
Phpbazar6
Phplistpro3
Smartisoft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-23152010-06-17PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the c…
CVE-2009-42222009-12-07phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin c…
CVE-2009-42212009-12-07SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid paramete…
CVE-2008-37672008-08-22SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
CVE-2006-25282006-05-22PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL i…
CVE-2006-25272006-05-22Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative s…
CVE-2006-25232006-05-22PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbit…
CVE-2006-23232006-05-12Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in…
CVE-2006-17492006-04-12PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath pa…