Alan Ward : Security Vulnerabilities, CVEs, Published In 2006 (Sql injection)
SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter.
Max CVSS
7.5
EPSS Score
0.20%
Published
2006-12-31
Updated
2017-10-19
Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in product.asp or (2) search parameter in search.asp. NOTE: the category.asp vector is already covered by CVE-2004-1873.
Max CVSS
7.5
EPSS Score
0.71%
Published
2006-11-26
Updated
2018-10-17
2 vulnerabilities found