CVE-2008-6277: Rakhisoftware Shopping Cart

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote attackers to execute arbitrary SQL commands via the subcategory_id parameter.

Affected products

• Rakhisoftware Rakhisoftware Shopping Cart: affected versions not specified

Published 2009-02-25. Last modified 2026-06-16.