Unscored severity · published Oct 6, 2007
CVE-2007-5261
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2)…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
Multicart · Iscripts
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5261
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5261
www.securityfocus.com
http://www.securityfocus.com/bid/25895
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36927
www.exploit-db.com
https://www.exploit-db.com/exploits/4480
More from Multicart
–
CVE-2008-0911
SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter