Description
SQL injection vulnerability in category_search.php in RazorCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- http://packetstorm.linuxsecurity.com/0809-exploits/razorcommerce-sql.txt
- 31733 third-party-advisory
- shoppingcart-categorysearch-sql-injection(45145) vdb-entry