CVE-2005-3735 in Coastal Data Management e-Quick Cart
Summary
Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.
Reservation
11/21/2005
Disclosure
11/21/2005
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 27013 | Coastal Data Management e-Quick Cart shopaddtocart.asp sql injection | 89 | Proof-of-Concept | Not defined | CVE-2005-3735 |