7.5
CVSSv2

CVE-2004-2173

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote malicious users to execute arbitrary SQL commands via the priceUntil parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

early impact productcart 1.5

early impact productcart 1.6b

early impact productcart 1.6b001

early impact productcart 2.5

early impact productcart 1.5003r

early impact productcart 1.5004

early impact productcart 1.6br

early impact productcart 1.6br001

early impact productcart 1.6002

early impact productcart 1.6003

early impact productcart 1.6br003

early impact productcart 2.0

early impact productcart 2.0br000

early impact productcart 1.5002

early impact productcart 1.5003

early impact productcart 1.6b002

early impact productcart 1.6b003