Comparison Engine Power Script XSS / SQL Injection

+=================================================================+ xTitle : Comparison Engine Power Script sql & xss Injection Vulnerability xSoftware : Comparison Engine Power Script xVendor : http://www.cmsnx.com xDownload : http://www.cmsnx.com/product.download.php?id=14 xDate : 26 April 2009...

Sql injection

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2791

CVE-2008-2791 describes a SQL injection vulnerability in the Kalptaru Infotech Comparison Engine Power Script 1.0, specifically in the file or process related to product.detail.php . The underlying cause is an unsafely handled id parameter that allows remote attackers to inject arbitrary SQL comm...

CVE-2008-2791: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...