CVE-2014-9345

Publication date

2014-12-08 16:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional (aka AWP PRO) 6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the group_id parameter in a list_zone action to cgi/client.cgi.