Description
SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, stating "if someone were to type in any sql injection code, that code would never be queried.
References
- 28618 vdb-entry
- 19074 vdb-entry
- 20060720 Re: AFCommerce Shopping Cart mailing-list
- 1255 third-party-advisory
- 1016538 vdb-entry
- afcommerce-search-sql-injection(27846) vdb-entry
- 20060719 AFCommerce Shopping Cart mailing-list