Unscored CVE-2005-1361 EUVD-2005-1364GHSA-hc4m-jrm7-9whx

Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdI…

Published Apr 28, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter to productsByCategory.asp.

References

13376 vdb-entry
20050426 Multiple SQL Injections in MetaCart e-Shop V-8 mailing-list
13377 vdb-entry
metacart-eshop-sql-injection(20283) vdb-entry