CVE-2005-4429

CVE-2005-4429 describes a SQL injection vulnerability in CS-Cart 1.3.0. The flaw resides in index.php where the parameters sort_by and sort_order can be exploited by remote attackers to execute arbitrary SQL commands. Documents indicate this affects CS-Cart 1.3.0 and allow arbitrary SQL execution...