CVE-2007-5261 Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to....
MediumCVSS 6.4
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iscripts multicart | = 1.0 | No fix listed |
References
- 25895 vdb-entry
- multicart-search-category-sql-injection(36927) vdb-entry
- 4480 exploit