The provided text describes an SQL injection vulnerability in CS-Cart 2.2.1, where the 'tabs_group_id' parameter in the 'products.php' controller is not properly sanitized. This allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:CS-Cart 2.2.1
No auth needed
Prerequisites:Access to the vulnerable endpoint · Knowledge of SQL injection techniques