CVE-2010-4633

The CVE-2010-4633 entry concerns digiSHOP 2.0.2: a SQL injection in cart.php via the id parameter, enabling remote arbitrary SQL execution. Root cause is improper handling of the id input leading to injection; impact is partial confidentiality/integrity/availability compromise as per description....