CVE-2005-4677

The CVE-2005-4677 entry describes a SQL injection vulnerability in the osCommerce Additional Images module (additional_images.php) before version 1.14. The flaw allows remote attackers to inject arbitrary SQL via the products_id parameter to product_info.php, enabling potentially unauthorized dat...