CVE-2009-2780

Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.

• CWE-79

• http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txtExploit
• http://secunia.com/advisories/36034Vendor Advisory
• http://www.osvdb.org/56564Exploit
• http://www.osvdb.org/56565Exploit
• http://www.osvdb.org/56566Exploit
• http://www.osvdb.org/56567Exploit
• http://www.osvdb.org/56568Exploit
• http://www.osvdb.org/56569Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52071
• http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txtExploit
• http://secunia.com/advisories/36034Vendor Advisory
• http://www.osvdb.org/56564Exploit
• http://www.osvdb.org/56565Exploit
• http://www.osvdb.org/56566Exploit
• http://www.osvdb.org/56567Exploit
• http://www.osvdb.org/56568Exploit
• http://www.osvdb.org/56569Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52071

Published

Aug 17, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2774SQL injection vulnerability in paidbanner.php in PHP Paid 4 …
• CVE-2009-2775SQL injection vulnerability in linkout.php in PHPArcadeScrip…
• CVE-2009-2776SQL injection vulnerability in showresult.asp in Smart ASP S…
• CVE-2009-2777SQL injection vulnerability in visitor/view.php in GarageSal…
• CVE-2009-2778Cross-site scripting (XSS) vulnerability in visitor/view.php…
• CVE-2009-2779SQL injection vulnerability in index.php in AJ Matrix DNA al…
• CVE-2009-2781SQL injection vulnerability in forum.php in Arab Portal 2.x,…
• CVE-2009-2782SQL injection vulnerability in the JFusion (com_jfusion) com…
• CVE-2009-2783Multiple cross-site scripting (XSS) vulnerabilities in XOOPS…
• CVE-2009-2784Multiple directory traversal vulnerabilities in dit.cms 1.3,…
• CVE-2009-2785Multiple cross-site scripting (XSS) vulnerabilities in PHP O…
• CVE-2009-2786SQL injection vulnerability in reputation.php in the Reputat…