CVE-2007-6566

N/A Unknown

Published: December 28, 2007 Modified: April 23, 2026

Description

SQL injection vulnerability in post.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatid parameter to index.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst

Source: cve@mitre.org

http://osvdb.org/39740

Source: cve@mitre.org

http://secunia.com/advisories/28250

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485545/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27042

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/39259

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4794

Source: cve@mitre.org

http://en.rstzone.org/xzero-community-classifieds-v4-95-11-lfi-sql-in-t9394.rst