CVE-2008-2339 Information

Description

SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action a different vector than CVE-2008-2038 CVE-2007-4597 and CVE-2007-2549.

Reference

http://secunia.com/advisories/30282 http://securityreason.com/securityalert/3894 http://www.securityfocus.com/archive/1/492120/100/0/threaded http://www.securityfocus.com/bid/29241 https://exchange.xforce.ibmcloud.com/vulnerabilities/42467