• info
• discussion
• exploit
• solution
• references

Brooky CubeCart SQL Injection Vulnerability

Solution:
The vendor has recommended the following fix:
INSERT
if (!is_numeric($cat_id))
unset($cat_id);

BEFORE
include("header.inc.php");

IN
index.php