CVEvulnerability

CVE-2005-2206

7.5 HIGH Published 2005-07-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-07-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.

Affected configurations

• elemental software cartwiz

References

http://digitalparadox.org/viewadvisories.ah?view=42 Exploit, Vendor Advisory
http://securitytracker.com/id?1014418 Exploit, Vendor Advisory
http://digitalparadox.org/viewadvisories.ah?view=42 Exploit, Vendor Advisory
http://securitytracker.com/id?1014418 Exploit, Vendor Advisory