返回 CVE 浏览器

CVE-2007-3357

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0130%

EPSS Percentile34.51th

Published2007年6月22日

Last Modified2026年4月23日

Vulnerability Description

NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain information via certain vectors.

Affected Platforms (CPE)

📦

Scriptdevelopers.net

Netclassifieds

= 1.0.1

References & Advisories

🔗 http://osvdb.org/38563

🔗 http://securityreason.com/securityalert/2824

🔗 http://www.securityfocus.com/archive/1/471944/100/0/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/35151

🔗 http://osvdb.org/38563

🔗 http://securityreason.com/securityalert/2824

🔗 http://www.securityfocus.com/archive/1/471944/100/0/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/35151

相关漏洞威胁

CVE-2007-33567.8

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path i...

CVE-2005-39787.5

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6...

CVE-2007-33547.5

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands ...

CVE-2007-33554.3

Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary w...