← Database

CVE-2008-4746

HIGH CVSS: 7.5 Published: 2008-10-27 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) search.asp and (2) cartUtil.asp.

Affected Platforms

Uniwin Ecart Professional

Weakness Type

CWE-89

References