CVE-2008-2866

CVE-2008-2866 describes an SQL injection in Caupo.net CaupoShop Classic 1.3. The vulnerability resides in the file csc_article_details.php and is exploitable via the parameter saArticle[ID] , enabling remote attackers to execute arbitrary SQL commands on the backend database. The affected product...