Description
SQL injection vulnerability in showcategory.php in Hutscripts PHP Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.
References
- ADV-2009-1978 vdb-entry
- hutscripts-cid-sql-injection(51913) vdb-entry
- http://packetstormsecurity.org/0907-exploits/hutscript-sqlxss.txt
- 56175 vdb-entry
- 35893 third-party-advisory