|
AlmondSoft Almond Classifieds SQL Injection Vulnerability
AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. UPDATE (June 30, 2008): The vendor indicates that this issue is not exploitable as reported because the parameter is sanitized. |
|
|
Privacy Statement |
