IGeneric Free Shopping Cart SQL Injection Vulnerability

No exploit is required to leverage this issue. The following proof of concept was provided:

page.php?page_type=catalog_products&type_id[]='[SQL-Injection]&SESSION_ID={SESSION_ID}&SESSION_ID=


 

Privacy Statement
Copyright 2010, SecurityFocus