CVE-2006-2038

ampleShop 2.1 and earlier are affected by multiple SQL injection vulnerabilities. The CVE-2006-2038 entry states remote attackers can execute arbitrary SQL via (1) RecordID in Customeraddresses_RecordAction.cfm and youraccount.cfm; (2) solus in detail.cfm; and (3) cat in category.cfm. Root cause:...