CVE-2009-5088: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...