Salescart

salescart

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-2997 1Salescart 1Shopping Cart Apr 23, 2026 Jun 4, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor di...Show more Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor disputes this issue, stating "We were able to reproduce this sql injection on an old out-of-date demo on the website but not on the released product.Show less
CVE-2000-0102 1Salescart 1Salescart Apr 16, 2026 Feb 1, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-2997

1Salescart

1Shopping Cart

Apr 23, 2026

Jun 4, 2007

N/A· v4

N/A· v3

7.5 HIGH· v2

Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor disputes this issue, stating "We were able to reproduce this sql injection on an old out-of-date demo on the website but not on the released product.Show less

CVE-2000-0102

1Salescart

Apr 16, 2026

Feb 1, 2000

N/A· v4

N/A· v3

7.5 HIGH· v2

The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.