CVE-2008-4570 in Real-estate-scripts
Summary
SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter.
Once again VulDB remains the best source for vulnerability data.