Posted by Filippo Cavallarin on Jan 30
Advisory ID: CSA-12003Title: Multiple vulnerabilities in OSClass
Product: OSClass
Version: 2.3.4 and probably prior
Vendor: osclass.org
Vulnerability type: SQL injection, XSS, Remote file inclusion
Vendor notification: 2012-01-12
Public disclosure: 2012-01-27
OSClass version 2.3.4 and probably below suffers from multiple vulnerabilities:
1) Remote file inclusion in osc_downloadFile(). This vuln allows an attacker...