CVE-2008-2866

Description

SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticle[ID] parameter.

Affected products

• caupo.net / cauposhop_classic1.3 – 1.3

References

• MISChttp://www.securityfocus.com/bid/29834
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/43200
• EXPLOIThttps://www.exploit-db.com/exploits/5865