1.2.8

DATE	CVE	VULNERABILITY TITLE	RISK
2009-04-20	CVE-2009-1345	SQL Injection vulnerability in Cpcommerce 1.2.8 SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_document parameter. network low complexity cpcommerce CWE-89	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.