CVE-2009-0426

Summary of CVE-2009-0426 : A SQL injection vulnerability affects DMXReady Classified Listings Manager 1.1 and earlier, specifically in CategoryManager/upload_image_category.asp where the cid parameter can be manipulated to execute arbitrary SQL commands. The root cause is unsafely constructed SQL...