CVE-2008-2504

CVE-2008-2504 affects Simpel Side Netbutik 1–4 . The vulnerabilities are SQL injection via the (1) cat parameter to netbutik.php and (2) id parameter to product.php. Root cause is unsafely embedded user input in SQL queries in these PHP scripts. Impact as stated: remote attackers can execute arbi...