SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.Referenceshttp://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/http://www.exploit-db.com/exploits/9276http://secunia.com/advisories/36009http://www.securityfocus.com/archive/1/505266/100/0/threadedhttp://www.securityfocus.com/bid/35810