GCVE - cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:early_impact:productcart:2.7:*:*:*:*:*:*:*

part: a version: 2.7 update: *

Vendor	Early Impact (`02491459-b139-54c1-943b-e6fe704f3a49`)
Product	Productcart (`50abf607-5c84-5b86-8c74-77343a2dcf6e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-1968`	vulnerable	2026-06-08 04:48:27.989820	Details available Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp. Published: 2005-06-14T04:00:00.000Z Updated: 2024-09-16T22:19:46.601Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014129 http://echo.or.id/adv/adv16-theday-2005.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0995`	vulnerable	2026-06-08 04:48:14.177128	Details available Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart. Published: 2005-04-07T04:00:00.000Z Updated: 2024-08-07T21:35:59.408Z Open on db.gcve.eu Reference links http://www.osvdb.org/15264 http://www.osvdb.org/15267 http://secunia.com/advisories/14833 http://www.securityfocus.com/bid/12990 http://www.osvdb.org/15268	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0994`	vulnerable	2026-06-08 04:48:14.176727	Details available Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report. Published: 2005-04-07T04:00:00.000Z Updated: 2024-08-07T21:35:59.528Z Open on db.gcve.eu Reference links http://www.osvdb.org/15263 http://secunia.com/advisories/14833 http://www.osvdb.org/15265 http://www.securityfocus.com/bid/12990 http://digitalparadox.org/advisories/prodcart.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.