CVE-2009-3215 Information

Description

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1 and the IXXO Cart component for Joomla! 1.0.x allows remote attackers to execute arbitrary SQL commands via the parent parameter.

Reference

http://secunia.com/advisories/36009 http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ http://www.exploit-db.com/exploits/9276 http://www.securityfocus.com/archive/1/505266/100/0/threaded http://www.securityfocus.com/bid/35810