Unscored CVE-2005-1291 EUVD-2005-1294GHSA-8gcx-p3mr-wcp8

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct param…

Published Apr 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp.

References

15773 vdb-entry
1013792 vdb-entry
15771 vdb-entry
15772 vdb-entry
20050423 Multiple Sql injection and XSS in CartWIZ ASP Cart mailing-list
15774 vdb-entry
15055 third-party-advisory
cartwiz-multiple-sql-injection(20246) vdb-entry