Description
SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the first_row parameter.
References
- tplshop-category-sql-injection(27200) vdb-entry
- 18524 vdb-entry
- http://pridels0.blogspot.com/2006/06/tplshop-v-20-vuln.html
- 26631 vdb-entry
- ADV-2006-2418 vdb-entry
- 20738 third-party-advisory