CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...