CVE-2008-2918: Application Dynamics Cartweaver

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3.

Affected products

• Application Dynamics Cartweaver: version 3.0 only

Published 2008-06-30. Last modified 2026-06-16.