Description
SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
References
- 20061126 [Aria-Security Team] General Shopping Cart SQL Injection Vulnerability mailing-list
- general-item-sql-injection(30542) vdb-entry
- 23140 third-party-advisory
- ADV-2006-4740 vdb-entry
- 21324 vdb-entry
- 1932 third-party-advisory
- http://www.aria-security.com/forum/showthread.php?t=48