CVE-2007-5261

CVE-2007-5261 affects MultiCart 1.0 with SQL injection via the catid parameter in categorydetail.php and the ddlCategory parameter in search.php, enabling remote arbitrary SQL execution. CVSS v2 base score 6.4 (Medium) with network access and low complexity; no remediation details are provided in...

CVE-2008-0911

CVE-2008-0911 affects iScripts MultiCart 2.0. The SQL injection vulnerability is in productdetails.php via the productid parameter, allowing remote authenticated users to execute arbitrary SQL commands. Documents provide CVSS base score 6.5 (MEDIUM) but do not include remediation steps. Exploit r...