CVE-2012-5294

CVE-2012-5294 describes a SQL injection in art_detalle.php of MyStore Xpress Tienda Virtual, exploitable by passing an id parameter to remotely execute arbitrary SQL commands. Multiple connected sources (NVD entry and related records) confirm the vendor/product context and the vulnerable componen...