VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 10, 2009· Updated Jun 16, 2026

CVE-2009-0462

CVE-2009-0462

Description

Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field) or (2) the txtPassword parameter (aka password field) to customer_login.asp. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Clicktech/Clickcart2 versions
    cpe:2.3:a:clicktech:clickcart:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:clicktech:clickcart:6.0:*:*:*:*:*:*:*
    • (no CPE)range: =6.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.