CVE-2007-4069

SQL injection vulnerability in show_cat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

Date published : 2007-07-30

http://www.securityfocus.com/bid/25064

http://www.indexscript.com/forum/showthread.php?t=2266