7.5
CVE-2005-2445
- EPSS 1.41%
- Veröffentlicht 03.08.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:54
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Early Impact ≫ Product Cart Version2.6
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.41% | 0.691 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/14833
http://securitytracker.com/id?1014129
http://marc.info/?l=bugtraq&m=112274710020521&w=2
http://www.osvdb.org/17329
http://www.osvdb.org/18508
http://www.securityfocus.com/bid/13881
https://exchange.xforce.ibmcloud.com/vulnerabilities/20956
https://exchange.xforce.ibmcloud.com/vulnerabilities/21672