2 matches found
CVE-2009-4940: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...
7.5CVSS6.4AI score0.00923EPSS
SaveExploits1References2
CVE-2010-1876: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action...
7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
20