Vulnerabilities > E Smart Cart

DATE CVE VULNERABILITY TITLE RISK
2007-09-08 CVE-2007-4762 SQL Injection vulnerability in E-Smart Cart E-Smart Cart 1.0
Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) pass fields, different vectors than CVE-2007-0092.
network
low complexity
e-smart-cart CWE-89
7.5
2007-01-05 CVE-2007-0092 SQL-Injection vulnerability in E-Smart Cart E-Smart Cart 1.0
SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter.
network
low complexity
e-smart-cart
7.5