CVE-2008-2790

CVE-2008-2790 affects MountainGrafix easyTrade 2.x; detail.php’s id parameter is vulnerable to SQL injection, enabling remote execution of arbitrary SQL commands as described in the sources. A patch is referenced (etv_patch_2_3_2.zip) for remediation. Exploitation details are not provided in the ...