CVE-2008-2853

CVE-2008-2853 describes a SQL injection in Easy Webstore 1.2, affecting the file index.php via the cat_path parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Affected software/entry: Easy Webstore 1.2 (index.php, cat_path). The initial documentation provides ...