CVE-2007-1810

CVE-2007-1810 is a SQL injection vulnerability in the Kshop 1.17 and earlier module for Xoops. The flaw affects product_details.php where the id parameter can be manipulated to execute arbitrary SQL commands on the database by remote attackers. The NVD entry lists a high impact (CVSS v2 base scor...