CVE-2008-2447

The CVE-2008-2447 entry concerns the Mytipper ZoGo-shop plugin for e107 (versions 1.15.5 and 1.16 Beta 13). The vulnerability is a SQL injection in products.php triggered via the cat parameter, enabling remote attackers to execute arbitrary SQL commands. The linked records confirm the affected co...