PT-2013-6296

Name of the Vulnerable Software and Affected Versions Classifieds Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ID parameter to "demo/classifieds/product.asp", or the UserID or Password field to...

CVE-2013-7216: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...