CVE-2008-3767

The CVE-2008-3767 entry describes an SQL injection vulnerability in phpBazar 2.0.2, found in classified.php where the adid parameter enables remote arbitrary SQL execution. Root cause is unsafe handling/concatenation of the adid input leading to SQL injection. Affected software: phpBazar 2.0.2, c...