CVE-2008-2453

CVE-2008-2453 affects the PHP Classifieds Script, with two SQL injection flaws: the fatherID parameter in browse.php and search.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. Impact is described as remote arbitrary SQL execution with partial confidentiality/i...

CVE-2008-2453: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL commands via the fatherID parameter to 1 browse.php and 2 search.php...