CVE-2008-1921

The CVE-2008-1921 entry describes an SQL injection in the 5th Avenue Shopping Cart 1.2 trial edition, specifically in store_pages/category_list.php, reachable via the category_ID parameter. The underlying issue allows remote attackers to craft SQL payloads to execute arbitrary commands. Documents...