CVE-2005-2190: Comersus Open Technologies Comersus Cart

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to comersus_optAffiliateRegistrationExec.asp or (2) idProduct parameter to comersus_optReviewReadExec.asp.

Affected products

• Comersus Open Technologies Comersus Cart: any version

Published 2005-07-11. Last modified 2026-06-16.