CVE-2009-0381

BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 for Joomla! is affected by an SQL injection in the cid parameter of a products action to index.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability stems from improper handling of user-supplied input in the affect...