CVE-2006-2948

Technical details about CVE-2006-2948 are not provided in the connected documents; only the generic description is available. Monitor for updates from official advisories.

CVE-2006-6111

CVE-2006-6111 covers multiple SQL injection flaws in Alan Ward A-CART Pro 2.0: remote SQL commands via productid in product.asp or via search in search.asp. The category.asp vector is addressed by CVE-2004-1873 (SQLi via catcode). Connected sources confirm a separate legacy issue (CVE-2004-1873) ...

CVE-2004-1874

CVE-2004-1874 describes multiple XSS vulnerabilities in A-CART Pro and A-CART 2.0, specifically in the vulnerable components deliver.asp and billing.asp, allowing remote attackers to inject arbitrary web script or HTML via the user information forms. Connected documents confirm the affected produ...

CVE-2004-1873

The CVE-2004-1873 entry concerns SQL injection in category.asp of A-CART Pro 2.0 and A-CART 2.0. The root cause is improper handling of the catcode parameter in category.asp, enabling remote attackers to gain privileges. Connected PT-2004-2772 provides concrete remediation guidance: update the ca...