CVE-2008-2634

CVE-2008-2634 affects I-Pos Internet Pay Online Store 1.3 Beta and earlier. The vulnerability is a SQL injection in index.asp, exploitable via the item parameter, allowing remote attackers to execute arbitrary SQL commands as described in the CVE record. Documented impact includes standard SQLi c...