CVE-2009-1345 in cpCommerce
Summary
SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_document parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
04/20/2009
Disclosure
04/20/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 47817 | cpCommerce document.php sql injection | 89 | High | Official fix | CVE-2009-1345 |