Unscored CVE-2005-1221 EUVD-2005-1224GHSA-vj6w-rxwq-j697

SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the…

Published Apr 22, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field.

References

http://www.ihssecurity.com/download/advisory/ecomerce-cart.txt
20050419 Ecommerce-Carts SQL injection vulnerability ( IHSTeam ) mailing-list
ecomm-pro-sql-injection(20200) vdb-entry