Description
SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter.
References
- 8460 third-party-advisory
- http://packetstormsecurity.org/0908-exploits/vbs-sql.txt
- 35375 third-party-advisory
- 43275 vdb-entry