CVE-2014-9345

CVE-2014-9345 affects Guruperl.net Advertise With Pleasure! Professional (AWP PRO) up to version 6.6. The vulnerability is an SQL injection in the list_zone action of cgi/client.cgi, exploitable via the group_id parameter. The root cause is improper handling of input in a SQL query, allowing remo...

CVE-2014-9345

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional aka AWP PRO 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the groupid parameter in a listzone action to cgi/client.cgi...