Description
SQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters.
References
- oscommerce-shoppingcart-sql-injection(28434) vdb-entry
- 1016719 vdb-entry
- 20060830 osCommerce < 2.2 Milestone 2 060817 POC Exploit mailing-list
- http://www.gulftech.org/?node=research&article_id=00110-08172006
- 19774 vdb-entry
- http://forums.oscommerce.com/index.php?showtopic=223556&pid=918371
- 19644 vdb-entry