CVE-2008-2904

CVE-2008-2904 describes an SQL injection in Conkurent PHPMyCart’s shop.php, exploitable via the cat parameter to allow remote execution of arbitrary SQL. Documents identify the affected software as PHPMyCart (Conkurent) and list a CVSS v2 base score of 7.5 (HIGH) with network access, low attack c...