Lucene search

MitreCVE-2005-1291

HistoryApr 26, 2005 - 4:00 a.m.

CVE-2005-1291

2005-04-2604:00:00

mitre

web.nvd.nist.gov

cve

sql injection

cartwiz

asp

remote attack

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

Low

EPSS

0.004

Percentile

74.6%

JSON

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp.

Affected configurations

Nvd

Node

cartwizasp_cart

VendorProductVersionCPE
cartwizasp_cart*cpe:2.3:a:cartwiz:asp_cart:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cartwiz	asp_cart	*	cpe:2.3:a:cartwiz:asp_cart::::::::

References

marc.info/?l=bugtraq&m=111428393022389&w=2

secunia.com/advisories/15055

securitytracker.com/id?1013792

www.osvdb.org/15771

www.osvdb.org/15772

www.osvdb.org/15773

www.osvdb.org/15774

exchange.xforce.ibmcloud.com/vulnerabilities/20246

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

Low

EPSS

0.004

Percentile

74.6%

JSON

Related for CVE-2005-1291