Vulnerabilities

TI-2008-00875 CVE-2008-0911 · GHSA-884f-qmw7-8v2m

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote…

LOW 30

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00856 Published 2008-02-22 No fix listed CWE-89

TI-2007-05066 CVE-2007-5261 · GHSA-fm4v-7qrr-j4j9

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute…

LOW 32

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01996 Published 2007-10-06 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote…

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute…