The PozScripts Classified Ads Script suffers from a remote SQL injection vulnerability in product_desc.php.