CVE-2005-3735

CVE-2005-3735

EPSS 1.5%

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/17652 http://securitytracker.com/id?1015244 http://www.osvdb.org/20997 http://www.osvdb.org/20998 http://www.osvdb.org/20999 http://www.securityfocus.com/bid/15510 http://www.vupen.com/english/advisories/2005/2506