Security Advisory
CVE-2004-1881
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.