CVE-2008-4354

SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

CVE-2008-4354

The CVE-2008-4354 entry describes an SQL injection in the NetArt Media iBoutique 4.0 products module, exploitable via the cat parameter to index.php. Affected component: products module; vulnerable input handling allows arbitrary SQL execution. Root cause: improper input validation for the cat pa...