Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Lynx Internet Solutions Subscribe
Filtered by product Evolve Merchant
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-6207 1 Lynx Internet Solutions 1 Evolve Merchant 2018-10-17 7.5 HIGH N/A
** DISPUTED ** SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error.
CVE-2006-5953 1 Lynx Internet Solutions 1 Evolve Merchant 2018-10-17 7.5 HIGH N/A
SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter.