| Package | Affected versions | Patched versions |
|---|---|---|
| cfwebstore | = 5.0 |
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free