CVE-2006-3152: Undefined Security Weakness

Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 sectio parameter in a login.php, b writenewad.php, c newad.php, d printad.php, e askseller.php, f browse.php, g showmemberads.php, h notead.php, i abuse.php, ...