CVE-2009-5088

CVE-2009-5088 describes an SQL injection in IdeaCart 0.02, specifically in secure/index.php where the cID parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability arises from improper input handling in that script, enabling data disclosure or modification depending o...