CVE-2005-1967

Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 idcategory parameter to viewPrd.asp, 2 lid parameter to editCategories.asp, 3 icd parameter to modCustomCardPaymentOpt.asp, or 4 idccr parameter to...

ProductCart Multiple Scripts SQL Injection

The remote host is running a version of the ProductCart shopping cart software that fails to properly sanitize user-supplied input before using it in SQL queries. An attacker may be able to exploit these flaws to alter database queries, disclose sensitive information, or conduct other such attack...