Vulnerability Details CVE-2007-4762
Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) pass fields, different vectors than CVE-2007-0092.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://14house.blogspot.com/2007/09/e-smart-cart-sql-injection.html
- http://osvdb.org/38419
- http://www.securityfocus.com/archive/1/487055/100/200/threaded
- http://www.securityfocus.com/bid/25532
- http://www.securityfocus.com/bid/27452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39988
- http://14house.blogspot.com/2007/09/e-smart-cart-sql-injection.html
- http://osvdb.org/38419
- http://www.securityfocus.com/archive/1/487055/100/200/threaded
- http://www.securityfocus.com/bid/25532
- http://www.securityfocus.com/bid/27452
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39988
Products affected by CVE-2007-4762
-
cpe:2.3:a:e-smart_cart:e-smart_cart:1.0