CVE-2008-0137: Improper Neutralization of Special Elements used in an SQL Command

PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...

CVE-2007-6568: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.inc.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathescape parameter...