CVE-2005-4331: Undefined Security Weakness

SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the 1 step, 2 id, and 3 pid parameters...