Security Advisory
CVE-2008-6277
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to execute arbitrary SQL commands via the subcategory_id parameter.