CVE-2005-2445

CVE-2005-2445 = SQL injection in Product Cart 2.6. The vulnerability is in viewPrd.asp and allows remote attackers to execute arbitrary SQL commands via the idcategory parameter. Documents indicate a remote attacker could alter queries; no exploit details are provided in the sources. No remediati...

ProductCart Multiple Scripts SQL Injection

The remote host is running a version of the ProductCart shopping cart software that fails to properly sanitize user-supplied input before using it in SQL queries. An attacker may be able to exploit these flaws to alter database queries, disclose sensitive information, or conduct other such attack...