CVE-2006-3164

SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the first_row parameter.

Date published : 2006-06-22

http://www.securityfocus.com/bid/18524

http://pridels0.blogspot.com/2006/06/tplshop-v-20-vuln.html