Description
SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php.
References
- 123tkshop-sql-injection(9582) vdb-entry
- http://www.123tkshop.org/index.php
- 5244 vdb-entry
- 20020715 Again NULL and addslashes() (now in 123tkshop) mailing-list