CVE-2006-2858: Locazo Locazolist Classifieds

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter.

Affected products

• Locazo Locazolist Classifieds: version 1.03c only; version 1.04d only; version 1.05e only

Published 2006-06-06. Last modified 2026-06-16.