osCommerce Customer Testimonials customer_testimonials.php testimonial_id Parameter SQL Injection

The remote host is running Customer Testimonials, a third-party addon for the open source e-commerce system osCommerce. The version of Customer Testimonials installed on the remote host fails to sanitize user input to the 'testimonialid' parameter of the 'customertestimonials.php' script before...

CVE-2008-0719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...