CVE-2009-4724

CVE-2009-4724 describes an SQL injection in shop.htm of the PPScript (PaymentProcessorScript.net). The vulnerability arises from unsafely handling the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component is the PPScript web interface (shop.htm); root caus...