CVE-2009-2023

CVE-2009-2023 affects Shop-Script Pro 2.12. The vulnerability is a SQL injection in index.php that is exploitable when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands via the current_currency parameter. The description is consistent across NVD, CVE List, ...

CVE-2009-2023

SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the currentcurrency parameter...

CVE-2009-2023

creationtimestamp| type| source ---|---|--- 2009-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8906...