← back
CVE-2005-3735

CVE-2005-3735

EPSS 1.5%
Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/17652http://securitytracker.com/id?1015244http://www.osvdb.org/20997http://www.osvdb.org/20998http://www.osvdb.org/20999http://www.securityfocus.com/bid/15510http://www.vupen.com/english/advisories/2005/2506