CVE-2005-3978

no score yetEPSS 2.7%

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
Published: 2005-12-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

scriptdevelopers.net:netclassifieds

References

http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html
http://secunia.com/advisories/17853
http://www.osvdb.org/21378
http://www.osvdb.org/21379
http://www.osvdb.org/21380

Check your stack JSON