CVE-2005-3914

AFFcommerce 1.1.4 is affected by multiple SQL injection vulnerabilities (CVE-2005-3914). The flaws allow remote attackers to inject arbitrary SQL via (1) cl parameter to SubCategory.php and (2) item_id parameter in ItemInfo.php and (3) ItemReview.php. The connected documents confirm the affected ...