CVE-2018-5972

The CVE corresponds to a SQL injection in Classified Ads CMS Quickad 4.0. Public sources (CNVD-2018-04366, CVE/NVD records, and mirrors) describe exploitation via the listing URI parameters keywords, placeid, cat, or subcat. The root cause is a SQL injection vulnerability in Quickad 4.0 implement...