7.5
CVSSv2

CVE-2005-2047

Published: 22/06/2005 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote malicious users to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp.

Vulnerable Product Search on Vulmon Subscribe to Product

duware dupaypal pro 3.0