CVE-2014-9455

CVE-2014-9455 concerns a SQL injection in the CTS Projects & Software ClassAd 3.0 web app. The vulnerability is located in showads.php where the catid parameter is not properly filtered, allowing remote attackers to execute arbitrary SQL commands. This is described consistently across multiple re...