7.5
CVE-2005-1967
- EPSS 1.07%
- Veröffentlicht 16.06.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:13:59
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter to editCategories.asp, (3) icd parameter to modCustomCardPaymentOpt.asp, or (4) idccr parameter to OptionFieldsEdit.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Early Impact ≫ Productcart Ecommerce Version <= 2.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.07% | 0.603 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://echo.or.id/adv/adv16-theday-2005.txt
http://securitytracker.com/id?1014129