CVE-2005-3735

CVE-2005-3735

EPSS 1.5%

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/17652 http://securitytracker.com/id?1015244 http://www.osvdb.org/20997 http://www.osvdb.org/20998 http://www.osvdb.org/20999 http://www.securityfocus.com/bid/15510 http://www.vupen.com/english/advisories/2005/2506