Almondsoft Almond Classifieds — known CVE vulnerabilities

Every CVE whose affected-product data names Almondsoft Almond Classifieds, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2005-3741 — CVSS 7.5 (high): Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.
• CVE-2009-2567 — CVSS 7.5 (high): SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute…
• CVE-2009-3226 — CVSS 7.5 (high): SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows…
• CVE-2009-3225 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network…
• CVE-2009-3227 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network…