CVE-2009-4689

2022-10-0316:24:02

mitre

www.cve.org

php

shopping cart

sql injection

remote attackers

arbitrary sql commands

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.0%

JSON

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter.

References

packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt

secunia.com/advisories/35894

www.vupen.com/english/advisories/2009/1977