|
Early Impact ProductCart Multiple SQL Injection Vulnerabilities
No exploit is required. The following proof of concept URI are available: http://www.example.com/pc/viewPrd.asp?idcategory=[catid][SQL INJECTION]&idproduct=[prod id] http://www.example.com/pc/pcadmin/editCategories.asp?nav=&lid=[id cat][sql injection] http://www.example.com/pc/pcadmin/modCustomCardPaymentOpt.asp?mode=Edit&idc=[page][sqlinjection]&id=[id]&gwCode=[code] http://www.example.com/pc/pcadmin/OptionFieldsEdit.asp?idc=1&id=[id]&idccr=[id][sqlInjection] |
|
|
Privacy Statement |
