CVEvulnerability
CVE-2007-5261
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
Affected configurations
• iscripts multicart 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/25895 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36927 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4480 www.exploit-db.com
- http://www.securityfocus.com/bid/25895 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36927 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4480 www.exploit-db.com