Vulnerabilities

TI-2006-06574 CVE-2006-6831 · GHSA-373q-78xr-xjxr

SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01036 Published 2007-01-01 No fix listed

TI-2006-05876 CVE-2006-6111 · GHSA-6jxw-cmhp-g5c4

Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers…

LOW 37

Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in product.asp or (2) search parameter in search.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02083 Published 2006-11-26 No fix listed

TI-2006-02853 CVE-2006-2948 · GHSA-72hw-4cxx-c98r

A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient…

LOW 26

A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01532 Published 2006-06-12 No fix listed

TI-2005-03854 CVE-2005-4064 · GHSA-gp4w-5hgv-rrqx

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01244 Published 2005-12-07 No fix listed

TI-2004-01749 CVE-2004-1874 · GHSA-vw9j-rf4j-gmjh

Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2)…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01255 Published 2005-05-10 No fix listed

TI-2004-01748 CVE-2004-1873 · GHSA-9vp2-wg6r-vp74

SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote…