Skip to content

CVE-2009-0296 SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

HighCVSS 7.5 EPSS 1.0% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

Affected products

ProductAffected versionsFixed in
gempar script toko online = 5.01 No fix listed

References

  • 51630 vdb-entry
  • 33661 third-party-advisory vendor-advisory
  • 7873 exploit