Description
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
References
- 20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities mailing-list
- 1009403 vdb-entry
- http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43
- cfwebstore-index-sql-injection(15447) vdb-entry
- http://www.s-quadra.com/advisories/Adv-20040312.txt
- 4229 vdb-entry
- 9854 vdb-entry
- 11112 third-party-advisory