CVE-2005-3043

SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter.

Date published : 2005-09-22

http://www.securityfocus.com/bid/14898

http://packetstormsecurity.org/0509-exploits/mall23.txt