CVE-2009-1027

CVE-2009-1027 describes a SQL injection vulnerability in OpenCart 1.1.8 where the attacker can remotely execute arbitrary SQL commands through the order parameter . The NVD entry assigns a base score of 7.5 (HIGH) with remote attack vector, low complexity, and no authentication required. Exploita...