Iscripts: >> Multicart Security Vulnerabilities
SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter.
CVSS Score
6.5
EPSS Score
0.003
Published
2008-02-22
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
CVSS Score
6.4
EPSS Score
0.003
Published
2007-10-06