Sql injection

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...

CVE-2014-9345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...

PT-2014-8948

Name of the Vulnerable Software and Affected Versions Guruperl.net Advertise With Pleasure! Professional aka AWP PRO versions 6.6 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the group id parameter in a "list zone" action to...