PT-2017-14717

Name of the Vulnerable Software and Affected Versions Posty Readymade Classifieds Script version 1.0 Description The issue allows an attacker to inject SQL commands via specific requests, such as "listings.php?catid=" or "ads-details.php?ID=". This could potentially lead to unauthorized access or...

CVE-2017-17111: Improper Neutralization of Special Elements used in an SQL Command

Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request...