PT-2006-6746 · Candypress · Candypress Store

Name of the Vulnerable Software and Affected Versions: CandyPress Store version 3.5.2.14 Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the policy parameter in "openPolicy.asp" or the brand...