CVE-2008-4746 Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) search.asp and (2) cartUtil.asp.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) search.asp and (2) cartUtil.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| uniwin ecart professional | = 2.0.17 | No fix listed |
References
- 31545 third-party-advisory vendor-advisory
- www.uniwin.com
- uniwinecart-search-cartutil-sql-injection(44609) vdb-entry