AFFCommerce Shopping Cart 1.1.4 - ItemInfo.php?item_id SQL Injection

2005-11-23T00:00:00
ID EXPLOITPACK:ED49AA6E39A4CD28A7747E89B9A747EC
Type exploitpack
Reporter r0t3d3Vil
Modified 2005-11-23T00:00:00

Description

AFFCommerce Shopping Cart 1.1.4 - ItemInfo.php?item_id SQL Injection

                                        
                                            source: https://www.securityfocus.com/bid/15545/info
 
AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities.
 
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
 
AFFCommerce Shopping Cart 1.1.4 is reportedly affected. It is possible that other versions are vulnerable as well. 

http://www.example.com/standalone/ItemInfo.php?item_id=[sql]