CVE-2005-1822
- State
- Published
- Severity
- Not scored
- Published
- Jun 1, 2005
- Updated
- Aug 7, 2024
- Reserved
- Jun 1, 2005
Description
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1014077vdb-entry
- 20050530 Multiple vulnerabilities in x-cart Goldmailing-list
- xcart-multiple-parameters-sql-injection(20773)vdb-entry
- 13817vdb-entry
- 15555third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.