CVE-2009-4712

CVE-2009-4712 describes an SQL injection in index.php of the Tukanas Classifieds (aka EasyClassifieds) Script 1.0, exploitable via the b parameter to allow remote execution of arbitrary SQL commands. Affected component is the web application’s input handling for b; root cause is improper input sa...