VULNERABILITY INTELLIGENCE
CVE-2005-2206
CVSS score7.5 HIGH
EPSS probability1.21%
CISA KEVNot currently listed
Published2005-07-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory