CVE-2005-1363: Metalinks METACART2

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter to productsByCategory.asp, (4) curCatalogID, (5) strSubCatalog_NAME, (6) intCatalogID, or (7) page parameter to productsByCategory.asp or (8) intProdID parameter to product.asp.

Affected products

• Metalinks METACART2: version payflow_link only

Published 2005-05-02. Last modified 2026-06-16.