CVE-2008-1272

CVE-2008-1272 concerns BM Classifieds (20080309 and earlier) with multiple SQL injection vulnerabilities. The affected facet is the web application’s handling of user-supplied input: the cat parameter to showad.php and the ad parameter to pfriendly.php, which allow remote attackers to execute arb...