EIP-2026-100183

The provided text describes an SQL injection vulnerability in CartWIZ, where the 'idProduct' parameter in the 'addToCart.asp' endpoint is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially leading to data disclosure or modification.