Skip to content
OpenAdvisories
Unscored CVE-2005-2206 EUVD-2005-2207GHSA-v9qh-67w4-xfvh

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAF…

Published Jul 11, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.

References