Description
SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter.
References
- 20061114 Evolve Merchant[ injection sql ] mailing-list
- 20061205 Re: Evolve Merchant[ injection sql ] mailing-list
- ADV-2006-4530 vdb-entry
- 21070 vdb-entry
- evolvemerchant-viewcart-sql-injection(30272) vdb-entry
- http://s-a-p.ca/index.php?page=OurAdvisories&id=28
- 22912 third-party-advisory