CVE-2008-2688

This exploit demonstrates SQL injection in Pilot Cart 7.3 via the 'article' parameter in 'pilot.asp'. It includes both union-based and blind SQL injection techniques to extract data from the 'msysobjects' table.

This advisory details multiple vulnerabilities in ASPilot Pilot Cart 7.3, including SQL injection, XSS, iFrame injections, and link injections. It provides specific parameter names and affected pages but lacks functional exploit code.