Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in index.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php_classifieds | Deltascripts | 7.1 (including) | 7.1 (including) |