Lucene search
HistoryJul 11, 2005 - 4:00 a.m.
CVE-2005-2190
cve-2005-2190
sql injection
comersus shopping cart
remote attackers
arbitrary sql commands
email parameter
idproduct parameter
nvd
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.9%
Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| comersus_open_technologies:comersus_cart | comersus open technologies comersus cart | eq | * |
Related
cvelist
cvelist
CVE-2005-2190
2005-07-10 04:00:00
CVE-2007-3323
2007-06-21 18:00:00
nessus
nessus
Comersus Cart Multiple Vulnerabilities (SQLi, XSS)
2005-07-08 00:00:00
cve
cve
CVE-2007-3323
2007-06-21 18:30:00
prion
prion
Sql injection
2007-06-21 18:30:00
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.9%
Related for CVE-2005-2190