CVE-2008-3755

CVE-2008-3755 describes an SQL injection in view.php of the YourFreeWorld Classifieds Script, allowing remote attackers to execute arbitrary SQL commands via the category parameter. Affected component: YourFreeWorld Classifieds Script (view.php). The root cause is an injectable category parameter...