CVE-2014-4741

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

xClassified 1.2 Bypass / Cross Site Scripting / SQL Injection

Exploit Title : xClassified 1.2 Multiple Vulnerabilities Vendor : http://xclassified.artifectx.com/ Date Found : 2014-07-08 Vulnerabilities : SQL Injection / Login Bypass / XSS ================= Discovery Status: ================= Published Exploitation Technique: ======================= Remote...

xClassified - ads.php SQL Injection

xClassified - ads.php SQL Injection source: https://www.securityfocus.com/bid/68438/info xClassified is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...