SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote malicious users to execute arbitrary SQL commands via the id parameter.