CVE-2004-2173: Early Impact Productcart

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter.

Affected products

• Early Impact Productcart: version 1.5 only; version 1.6b only; version 1.6b001 only; version 1.6b002 only; version 1.6b003 only; version 1.6br only; …

Published 2004-12-31. Last modified 2026-06-16.