TemplateMonster osCommerce prior to version 2.3x suffers from an error-based SQL injection vulnerability. Continue reading...