Lynx Internet Solutions: Security Vulnerabilities
SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error
CVSS Score
7.5
EPSS Score
0.003
Published
2006-12-01
SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter.
CVSS Score
7.5
EPSS Score
0.008
Published
2006-11-17