SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action.
https://exchange.xforce.ibmcloud.com/vulnerabilities/66551
http://www.securityfocus.com/bid/47136