SQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote malicious users to execute arbitrary SQL commands via the cat_id parameter.
vastal i-tech dvd zone