[security] osCommerce 2.2-MS1 SQL Injection Vulnerability

> Solution:

> The vendor was not contacted as the problem seems to have been resolved
> in osCommerce 2.2-MS2 Users are advised upgrade to the current milestone
> release http://www.oscommerce.com/downloads

ttp://lists.seifried.org/pipermail/security/2003-December/000359.html