[VIM] Dup: litecommerce 2004 (category_id) Remote SQL Injection Vulnerability

[George A. Theall]

milw0rm 4300 seems like a subset of the issues described by Diabolic 
Crab in his/her/its Bugtraq posting from April 2005:

   http://www.securityfocus.com/archive/1/395130/30/0/threaded

Both involve the 'category_id' parameter to the 'cart.php' script when 
"target=category".

George
-- 
theall at tenablesecurity.com