3 matches found
CVE-2005-1593
CVE-2005-1593 affects CodeThatShoppingCart 1.3.1 via the catalog.php id parameter. The issue is an input validation flaw that allows an unauthenticated remote attacker to perform both SQL injection and cross-site scripting by sending crafted requests, according to OpenVAS and CVE records. The vul...
CVE-2005-1595
CodeThat ShoppingCart 1.3.1 is affected by remote vulnerabilities described across connected sources. The OpenVAS NASL entry documents input validation flaws in the remote CodeThat ShoppingCart that allow SQL injection via the id parameter of catalog.php, enabling unauthenticated remote exploitat...
CVE-2005-1594
CVE-2005-1594: SQL injection in CodeThat ShoppingCart 1.3.1 via catalog.php, where the id parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability affects the PHP-based ShoppingCart software and arises from unsanitized input used in a database query, enabling an atta...