CVE-2014-9455

SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CTS Projects & Software ClassAd SQL Injection Vulnerability

CTS Projects & Software ClassAd is an online advertising application. The CTS Projects & Software ClassAd showads.php script does not properly filter the catid parameter, allowing remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...