{
    "id": "CVE-2008-6543",
    "published": "2009-03-30 01:30:00",
    "last_modified": "2026-06-16 23:02:25",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": "CWE-94",
    "description": "Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php3, (2) locate.php3, (3) search_results.php3, (4) classifieds/index.php3, and (5) classifieds/view.php3; (6) index.php3, (7) manager.php3, (8) pass.php3, (9) remember.php3 (10) sign-up.php3, (11) update.php3, (12) userSet.php3, and (13) verify.php3 in controlcenter/; (14) alterCats.php3, (15) alterFeatured.php3, (16) alterHomepage.php3, (17) alterNews.php3, (18) alterTheme.php3, (19) color_help.php3, (20) createdb.php3, (21) createFeatured.php3, (22) createHomepage.php3, (23) createL.php3, (24) createM.php3, (25) createNews.php3, (26) createP.php3, (27) createS.php3, (28) createT.php3, (29) index.php3, (30) mailadmin.php3, and (31) setUp.php3 in controlpannel/; (32) include/sendit.php3 and (33) include/sendit2.php3; and possibly (34) include/adminHead.inc, (35) include/usersHead.inc, and (36) style/default.scheme.inc.",
    "epss_score": "0.02544",
    "epss_percentile": "0.84540",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-09 18:17:09",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "comscripts",
            "product": "quick_classifieds"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "31506",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createT.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31506"
        },
        {
            "source": "exploit-db",
            "ref_id": "31498",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createdb.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31498"
        },
        {
            "source": "exploit-db",
            "ref_id": "31499",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createFeatured.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31499"
        },
        {
            "source": "exploit-db",
            "ref_id": "31500",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createHomepage.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31500"
        },
        {
            "source": "exploit-db",
            "ref_id": "31501",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createL.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31501"
        },
        {
            "source": "exploit-db",
            "ref_id": "31502",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createM.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31502"
        },
        {
            "source": "exploit-db",
            "ref_id": "31503",
            "title": "Quick Classifieds 1.0 - '/controlpannel/createNews.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31503"
        },
        {
            "source": "exploit-db",
            "ref_id": "31504",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createP.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31504"
        },
        {
            "source": "exploit-db",
            "ref_id": "31505",
            "title": "Quick Classifieds 1.0 - 'controlpannel/createS.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31505"
        },
        {
            "source": "exploit-db",
            "ref_id": "31497",
            "title": "Quick Classifieds 1.0 - 'controlpannel/color_help.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31497"
        },
        {
            "source": "exploit-db",
            "ref_id": "31507",
            "title": "Quick Classifieds 1.0 - 'controlpannel/index.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31507"
        },
        {
            "source": "exploit-db",
            "ref_id": "31508",
            "title": "Quick Classifieds 1.0 - 'controlpannel/mailadmin.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31508"
        },
        {
            "source": "exploit-db",
            "ref_id": "31509",
            "title": "Quick Classifieds 1.0 - 'controlpannel/setUp.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31509"
        },
        {
            "source": "exploit-db",
            "ref_id": "31510",
            "title": "Quick Classifieds 1.0 - 'include/sendit.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31510"
        },
        {
            "source": "exploit-db",
            "ref_id": "31511",
            "title": "Quick Classifieds 1.0 - 'include/sendit2.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31511"
        },
        {
            "source": "exploit-db",
            "ref_id": "31512",
            "title": "Quick Classifieds 1.0 - 'include/adminHead.inc?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31512"
        },
        {
            "source": "exploit-db",
            "ref_id": "31513",
            "title": "Quick Classifieds 1.0 - 'include/usersHead.inc?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31513"
        },
        {
            "source": "exploit-db",
            "ref_id": "31514",
            "title": "Quick Classifieds 1.0 - 'style/default.scheme.inc?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31514"
        },
        {
            "source": "exploit-db",
            "ref_id": "31488",
            "title": "Quick Classifieds 1.0 - 'controlcenter/sign-up.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31488"
        },
        {
            "source": "exploit-db",
            "ref_id": "31480",
            "title": "Quick Classifieds 1.0 - 'locate.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31480"
        },
        {
            "source": "exploit-db",
            "ref_id": "31481",
            "title": "Quick Classifieds 1.0 - 'search_results.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31481"
        },
        {
            "source": "exploit-db",
            "ref_id": "31482",
            "title": "Quick Classifieds 1.0 - 'Classifieds/index.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31482"
        },
        {
            "source": "exploit-db",
            "ref_id": "31483",
            "title": "Quick Classifieds 1.0 - 'Classifieds/view.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31483"
        },
        {
            "source": "exploit-db",
            "ref_id": "31484",
            "title": "Quick Classifieds 1.0 - 'controlcenter/index.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31484"
        },
        {
            "source": "exploit-db",
            "ref_id": "31485",
            "title": "Quick Classifieds 1.0 - 'controlcenter/manager.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31485"
        },
        {
            "source": "exploit-db",
            "ref_id": "31486",
            "title": "Quick Classifieds 1.0 - 'controlcenter/pass.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31486"
        },
        {
            "source": "exploit-db",
            "ref_id": "31487",
            "title": "Quick Classifieds 1.0 - 'controlcenter/remember.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31487"
        },
        {
            "source": "exploit-db",
            "ref_id": "31479",
            "title": "Quick Classifieds 1.0 - 'index.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31479"
        },
        {
            "source": "exploit-db",
            "ref_id": "31489",
            "title": "Quick Classifieds 1.0 - 'controlcenter/update.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31489"
        },
        {
            "source": "exploit-db",
            "ref_id": "31490",
            "title": "Quick Classifieds 1.0 - 'controlcenter/userSet.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31490"
        },
        {
            "source": "exploit-db",
            "ref_id": "31491",
            "title": "Quick Classifieds 1.0 - 'controlcenter/verify.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31491"
        },
        {
            "source": "exploit-db",
            "ref_id": "31492",
            "title": "Quick Classifieds 1.0 - 'controlpannel/alterCats.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31492"
        },
        {
            "source": "exploit-db",
            "ref_id": "31493",
            "title": "Quick Classifieds 1.0 - 'controlpannel/alterFeatured.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31493"
        },
        {
            "source": "exploit-db",
            "ref_id": "31494",
            "title": "Quick Classifieds 1.0 - 'controlpannel/alterHomepage.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31494"
        },
        {
            "source": "exploit-db",
            "ref_id": "31495",
            "title": "Quick Classifieds 1.0 - '/controlpannel/alterNews.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31495"
        },
        {
            "source": "exploit-db",
            "ref_id": "31496",
            "title": "Quick Classifieds 1.0 - 'controlpannel/alterTheme.php3?DOCUMENT_ROOT' Remote File Inclusion",
            "date": "2008-03-24",
            "url": "https://www.exploit-db.com/exploits/31496"
        }
    ],
    "refs_list": [
        "http://www.securityfocus.com/bid/28417",
        "http://www.securityfocus.com/bid/28417/exploit",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/42469",
        "http://www.securityfocus.com/bid/28417",
        "http://www.securityfocus.com/bid/28417/exploit",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/42469"
    ]
}