Lucene search

[email protected]CVE-2005-1967

HistoryJun 16, 2005 - 4:00 a.m.

CVE-2005-1967

2005-06-1604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1967

productcart

ecommerce

sql injection

security vulnerability

nvd

8.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

54.5%

JSON

Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter to editCategories.asp, (3) icd parameter to modCustomCardPaymentOpt.asp, or (4) idccr parameter to OptionFieldsEdit.asp.

CPENameOperatorVersion
early_impact:productcart_ecommerceearly impact productcart ecommercele2.7

CPE	Name	Operator	Version
early_impact:productcart_ecommerce	early impact productcart ecommerce	le	2.7

References

echo.or.id/adv/adv16-theday-2005.txt

securitytracker.com/id?1014129

8.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

54.5%

JSON

Related for CVE-2005-1967

nessus1