Security Advisory

CVE-2005-1363

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-04-28 04:00:00

Last updated 2024-08-07 21:44:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp.

← Browse all CVEs View on cve.org ↗