CVE-2006-4882

The CVE-2006-4882 entry describes a SQL injection in Review.asp of Julian Roberts Charon Cart 3, exploitable via the ProductID parameter. The underlying vulnerability is the ability for remote attackers to execute arbitrary SQL commands, with impact described as partial confidentiality, integrity...