CVE-2008-5838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...