CVE-2008-1272: Bmscripts Bm Classifieds

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.

Affected products

• Bmscripts Bm Classifieds: up to and including 20080309

Published 2008-03-10. Last modified 2026-06-16.