Comparison Engine Power Script XSS / SQL Injection

+=================================================================+ xTitle : Comparison Engine Power Script sql & xss Injection Vulnerability xSoftware : Comparison Engine Power Script xVendor : http://www.cmsnx.com xDownload : http://www.cmsnx.com/product.download.php?id=14 xDate : 26 April 2009...

Sql injection

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2791

CVE-2008-2791 describes a SQL injection vulnerability in the Kalptaru Infotech Comparison Engine Power Script 1.0, specifically in the file or process related to product.detail.php . The underlying cause is an unsafely handled id parameter that allows remote attackers to inject arbitrary SQL comm...