CVE-2008-4884

CVE-2008-4884 describes a SQL injection in tr.php of the YourFreeWorld Classifieds Hosting Script, exploitable via the id parameter to allow remote SQL command execution. The vulnerability is evidenced by multiple trusted sources (NVD/NIST and CVE listings) confirming an injection flaw with a hig...

CVE-2008-4884: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...