CVE-2005-1291

no score yetEPSS 1.5%

cartwiz asp cart: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3) priceFrom, (4) idCategory, or (5) priceTo parameter to searchResults.asp, or (6) the idParentCategory parameter to productCatalogSubCats.asp.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
Published: 2005-04-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cartwiz:asp_cart

References

http://marc.info/?l=bugtraq&m=111428393022389&w=2
http://secunia.com/advisories/15055
http://securitytracker.com/id?1013792
http://www.osvdb.org/15771
http://www.osvdb.org/15772

Check your stack JSON