high7.5
CVE-2009-4891
SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a pr…
Impact
SQL injection vulnerability in index.php in CS-Cart 2.0.0 Beta 3 allows remote attackers to execute arbitrary SQL commands via the product_id parameter in a products.view action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cs-Cart | Cs-Cart | Version 2.0 |