CVE-2008-3673

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672.

• CWE-89

• http://secunia.com/advisories/31291Vendor Advisory
• http://securityreason.com/securityalert/4153Exploit
• http://www.securityfocus.com/bid/30454Exploit
• http://www.vupen.com/english/advisories/2008/2253/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44112
• https://www.exploit-db.com/exploits/6169
• http://secunia.com/advisories/31291Vendor Advisory
• http://securityreason.com/securityalert/4153Exploit
• http://www.securityfocus.com/bid/30454Exploit
• http://www.vupen.com/english/advisories/2008/2253/referencesVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44112
• https://www.exploit-db.com/exploits/6169

Published

Aug 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3667Stack-based buffer overflow in Maxthon Browser 2.0 and earli…
• CVE-2008-3668Multiple cross-site scripting (XSS) vulnerabilities in the Y…
• CVE-2008-3669SQL injection vulnerability in comments.php in ZeeScripts Re…
• CVE-2008-3670SQL injection vulnerability in authordetail.php in Article F…
• CVE-2008-3671Acronis True Image Echo Server 9.x build 8072 on Linux does …
• CVE-2008-3672SQL injection vulnerability in showcategory.php in PozScript…
• CVE-2008-3674SQL injection vulnerability in ugroups.php in PozScripts Tub…
• CVE-2008-3675Directory traversal vulnerability in classes/imgsize.php in …
• CVE-2008-3676Unspecified vulnerability in the IMAP server in hMailServer …
• CVE-2008-3677Directory traversal vulnerability in includes/events_applica…
• CVE-2008-3678Cross-site scripting (XSS) vulnerability in admin/search_lin…
• CVE-2008-3679Multiple cross-site scripting (XSS) vulnerabilities in index…