Lucene search
MitreCVE-2005-2206HistoryJul 11, 2005 - 4:00 a.m.
CVE-2005-2206
2005-07-1104:00:00
mitre
web.nvd.nist.gov
31
cve-2005-2206
sql injection
cartwiz
remote attack
security vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.002
Percentile
56.8%
Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.
Affected configurations
Node
elemental_softwarecartwiz
| Vendor | Product | Version | CPE |
|---|---|---|---|
| elemental_software | cartwiz | * | cpe:2.3:a:elemental_software:cartwiz:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.002
Percentile
56.8%
Related for CVE-2005-2206