CVE-2006-3330

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-30 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php.

Affected products

Deltascripts Php Classifieds: 6.04

References

http://secunia.com/advisories/20880
http://securityreason.com/securityalert/1179
http://securitytracker.com/id?1016407
http://www.securityfocus.com/archive/1/438667/100/0/threaded
http://www.securityfocus.com/bid/18713
http://www.securityfocus.com/bid/18717
http://www.vupen.com/english/advisories/2006/2589
https://exchange.xforce.ibmcloud.com/vulnerabilities/27454
http://secunia.com/advisories/20880
http://securityreason.com/securityalert/1179
http://securitytracker.com/id?1016407
http://www.securityfocus.com/archive/1/438667/100/0/threaded

Get alerted when CVE-2006-3330 or the next vulnerability affects your stack