CVE-2008-4570 – Real Estate Scripts 2008 - 'cat' SQL Injection

https://notcve.org/view.php?id=CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter. Vulnerabilidad de inyección SQL en index.php de Real Estate Classifieds permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro cat. • https://www.exploit-db.com/exploits/6736 http://secunia.com/advisories/32223 http://securityreason.com/securityalert/4418 http://www.securityfocus.com/bid/31723 https://exchange.xforce.ibmcloud.com/vulnerabilities/45819 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •