CVE-2008-4744

CVE-2008-4744 describes an SQL injection in DXShopCart 4.30mc where the pid parameter in product_detail.php can be used by remote attackers to execute arbitrary SQL commands. The vulnerability is technically a network-accessible injection affecting confidentiality, integrity, and availability (pa...