CVE-2005-2445

CVE-2005-2445 = SQL injection in Product Cart 2.6. The vulnerability is in viewPrd.asp and allows remote attackers to execute arbitrary SQL commands via the idcategory parameter. Documents indicate a remote attacker could alter queries; no exploit details are provided in the sources. No remediati...

CVE-2005-2445: Undefined Security Weakness

SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter...

CVE-2005-1967: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 idcategory parameter to viewPrd.asp, 2 lid parameter to editCategories.asp, 3 icd parameter to modCustomCardPaymentOpt.asp, or 4 idccr parameter to...

ProductCart Multiple Scripts SQL Injection

The remote host is running a version of the ProductCart shopping cart software that fails to properly sanitize user-supplied input before using it in SQL queries. An attacker may be able to exploit these flaws to alter database queries, disclose sensitive information, or conduct other such attack...