Unscored severity · published Feb 22, 2008
CVE-2008-0911
SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter
–
CVSS
0.9%
EPSS
No
On KEV
Description
SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
Multicart · Iscripts
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0911
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0911
Vendor Advisory
http://secunia.com/advisories/29018
Exploit
http://www.securityfocus.com/bid/27916
www.exploit-db.com
https://www.exploit-db.com/exploits/5166
More from Multicart
–
CVE-2007-5261
Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2)…