CVE-2007-5261

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute...

6.4 MediumPublic exploit

CVE-2007-5261 is a medium vulnerability (CVSS 6.4) in Iscripts Multicart, published October 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. No source names a fixed version.

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to categorydetail.php and the (2) ddlCategory parameter to search.php.

Exploit likelihood

2.00%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 6.4

Record: CVE-2007-5261
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-5261
Updated: 2026-11-02

EUVDEUVD-2007-5241 No score

Record: EUVD-2007-5241
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fm4v-7qrr-j4j9 No score

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute...

Record: GHSA-fm4v-7qrr-j4j9
Weakness: CWE-89
Updated: 2026-11-02

Affected products

iscripts multicart

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	MultiCart 1.0 - Blind SQL Injection	2007-10-02

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories
2026-11-02	created	CVE List, NVD

Exploit likelihood

What each source reports

Affected products

Public exploits

History

References