CVE

Id
10308  
CVE No.
CVE-2004-1881  
Status
Candidate  
Description
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments