Sql injection

SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-4724

SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-4724

CVE-2009-4724 describes an SQL injection in shop.htm of the PPScript (PaymentProcessorScript.net). The vulnerability arises from unsafely handling the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component is the PPScript web interface (shop.htm); root caus...