CVE-2006-6111: Alan Ward A-Cart

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in product.asp or (2) search parameter in search.asp. NOTE: the category.asp vector is already covered by CVE-2004-1873.

Affected products

• Alan Ward A-Cart: version 2.0 only

Published 2006-11-26. Last modified 2026-06-16.