Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2003-1520 Details

SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://securityreason.com/securityalert/3293	CVE	ExploitPatch
http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes	CVE
http://www.securityfocus.com/archive/1/341908	CVE	ExploitPatch
http://www.securityfocus.com/bid/8863	CVE	ExploitPatch
http://securityreason.com/securityalert/3293	[email protected]	ExploitPatch
http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes	[email protected]
http://www.securityfocus.com/archive/1/341908	[email protected]	ExploitPatch
http://www.securityfocus.com/bid/8863	[email protected]	ExploitPatch

CWE-ID	CWE Name	Source
CWE-89	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	[email protected]

Product	Versions
fuzzymonkey myclassifieds	2.11
CPE cpe:2.3:a:fuzzymonkey:myclassifieds:2.11:::::::* Remediation No remediation found in references.

5 change records found show changes

QUICK INFO