Alan Ward : Security Vulnerabilities, CVEs, Published In 2006
SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter.
Max CVSS
7.5
EPSS Score
0.20%
Published
2006-12-31
Updated
2017-10-19
Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in product.asp or (2) search parameter in search.asp. NOTE: the category.asp vector is already covered by CVE-2004-1873.
Max CVSS
7.5
EPSS Score
0.71%
Published
2006-11-26
Updated
2018-10-17
A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information.
Max CVSS
5.0
EPSS Score
0.91%
Published
2006-06-12
Updated
2018-10-18
3 vulnerabilities found