Description
SQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessid parameter.
References
- ADV-2006-4511 vdb-entry
- 22867 third-party-advisory
- shopsystem-index-sql-injection(30219) vdb-entry
- 21005 vdb-entry
- 1871 third-party-advisory
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls33
- 20061111 [MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue mailing-list