OpenAutoClassifieds is a vehicle classifieds manager. Intended to be both easy to install and easy to administer, it uses PHP to drive a MySQL backend, thus creating a tool that is fast and flexible. No HTML coding is required to add, delete, or modify listings. You can upload photos via your Web browser. If photos are not uploaded for a vehicle, a "photo not available" image will be automatically displayed for the listing.
License: GNU General Public License (GPL)
Changes:
A login bypass SQL injection attack has been fixed. A remote SQL exploit to gather user data by unauthorized user in listing.php has been fixed. Unauthorized user escalation in the admin section has been fixed. An SQL attack vulnerability that allowed unauthorized users to change database entries has been fixed.
More...