CVE-2006-3152

Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 sectio parameter in a login.php, b writenewad.php, c newad.php, d printad.php, e askseller.php, f browse.php, g showmemberads.php, h notead.php, i abuse.php, ...

CVE-2006-3152

phpTRADER 4.9 SP5 and earlier is affected by multiple SQL injection vulnerabilities permitting remote attackers to execute arbitrary SQL commands via a set of parameters across login.php, write_newad.php, newad.php, printad.php, askseller.php, browse.php, showmemberads.php, note_ad.php, abuse.php...