CVE-2005-2206

CVE-2005-2206 concerns CartWIZ, which has multiple SQL injection vulnerabilities in the web app. According to the sources, remote attackers can modify SQL statements through specific parameters: (1) idProduct in tellAFriend.asp, (2) sortType in viewSupportTickets.asp, and (3) id in updateCreditCa...