Description
SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter.
References
- 20040216 EarlyImpact ProductCart shopping cart software multiple security vulnerabilities mailing-list
- 9669 vdb-entry
- productcart-advsearchhasp-sql-injection(15233) vdb-entry
- http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt
- 1009085 vdb-entry
- 20040216 EarlyImpact ProductCart shopping cart software multiple security vulnerabilities mailing-list
- 3981 vdb-entry
- http://www.s-quadra.com/advisories/Adv-20040216.txt
- 20040218 Re: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities mailing-list
- 10898 third-party-advisory