Vulnerability in Elemental Software Cartwiz
CVE-2005-2206
Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.
EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.
Affected products
- Elemental_software Cartwiz
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)