CVE-2005-0994

no score yetEPSS 3.9%

early impact productcart: no CVSS score yet. EPSS 3.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report.

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2005-05-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

early_impact:productcart

References

http://digitalparadox.org/advisories/prodcart.txt
http://secunia.com/advisories/14833
http://www.osvdb.org/15263
http://www.osvdb.org/15265
http://www.securityfocus.com/bid/12990

Check your stack JSON