CVE-2005-2206

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2)…

published July 11, 2005

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01210 · 68.2th percentile
Published
2005-07-11T04:00Z
EPSS history
Timeline
  • 11 JUL 04:00Z
    Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2)…
    cvelistv5