CVE-2004-1881

SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.

Date published : 2005-05-10

http://www.securityfocus.com/bid/10019

http://marc.info/?l=bugtraq&m=108075059013762&w=2