CVE-2009-0296

CVE-2009-0296 describes a SQL injection in the shop_display_products.php component of the Script Toko Online 5.01 application, exploitable via the cat_id parameter. The vulnerability can allow remote attackers to execute arbitrary SQL commands, with impact described in CVSS as Partial confidentia...