CVE-2008-2917

The CVE-2008-2917 entry describes a SQL injection vulnerability in productsofcat.asp of E-SMART CART, exploitable via the category_id parameter to allow remote execution of arbitrary SQL commands. Affected component: productsofcat.asp in E-SMART CART. Underlying cause: improper handling of catego...