CVE-2008-2339

The CVE-2008-2339 entry describes an SQL injection vulnerability in Turnkey Web Tools SunShop Shopping Cart 3.5.1. The flaw occurs in the index.php file, where an attacker can inject SQL via the id parameter in an item action, potentially allowing remote execution of arbitrary SQL commands. This ...