Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report.
References
| Link | Resource |
|---|---|
| http://digitalparadox.org/advisories/prodcart.txt | |
| http://secunia.com/advisories/14833 | Vendor Advisory |
| http://www.osvdb.org/15263 | Exploit |
| http://www.osvdb.org/15265 | |
| http://www.securityfocus.com/bid/12990 | Exploit |
| http://digitalparadox.org/advisories/prodcart.txt | |
| http://secunia.com/advisories/14833 | Vendor Advisory |
| http://www.osvdb.org/15263 | Exploit |
| http://www.osvdb.org/15265 | |
| http://www.securityfocus.com/bid/12990 | Exploit |
Configurations
History
20 Nov 2024, 23:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://digitalparadox.org/advisories/prodcart.txt - | |
| References | () http://secunia.com/advisories/14833 - Vendor Advisory | |
| References | () http://www.osvdb.org/15263 - Exploit | |
| References | () http://www.osvdb.org/15265 - | |
| References | () http://www.securityfocus.com/bid/12990 - Exploit |
15 Jun 2021, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report. |
Information
Published : 2005-05-02 04:00
Updated : 2024-11-20 23:56
NVD link : CVE-2005-0994
Mitre link : CVE-2005-0994
CVE.ORG link : CVE-2005-0994
JSON object : View
Products Affected
early_impact
- productcart
CWE