CVE-2006-2650

SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter...

CVE-2006-2650

The CVE-2006-2650 entry documents an SQL injection in CosmicShoppingCart, specifically in cosmicshop/search.php, exploitable via the max parameter. The vulnerability allows remote attackers to craft arbitrary SQL commands executed by the database. The affected component is the search functionalit...