cpe:/a:e-topbiz:online_store:1.0 CVE-2008-5802 2008-12-31T06:30:00.610-05:00 2017-09-28T21:32:49.150-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2008-12-31T16:23:00.000-05:00 ALLOWS_OTHER_ACCESS BID 32197 SECUNIA 32641 EXPLOIT-DB 7048 VUPEN ADV-2008-3078 XF onlinestore-login-index-sql-injection(46453) SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.