CVE-2004-2173

SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter.

Date published : 2005-07-10

http://www.securityfocus.com/bid/9669

http://www.securityfocus.com/archive/1/354288