CVE-2009-4689

2010-03-1022:00:00

mitre

www.cve.org

php

shopping cart

sql injection

remote attackers

arbitrary sql commands

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

33.9%

JSON

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

References

packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt

secunia.com/advisories/35894

www.vupen.com/english/advisories/2009/1977