Published: 16/06/2005 Updated: 05/09/2008

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in ProductCart Ecommerce prior to 2.7 allow remote malicious users to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter to editCategories.asp, (3) icd parameter to modCustomCardPaymentOpt.asp, or (4) idccr parameter to OptionFieldsEdit.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
early impact productcart ecommerce

source: wwwsecurityfocuscom/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or modification of ...

source: wwwsecurityfocuscom/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or modification of dat ...

source: wwwsecurityfocuscom/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or modification ...

source: wwwsecurityfocuscom/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure or modification of d ...

NVD-CWE-Other http://echo.or.id/adv/adv16-theday-2005.txt http://securitytracker.com/id?1014129 https://nvd.nist.gov https://www.exploit-db.com/exploits/25797/

CVE-2005-1967

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect