CVE-2005-1361

CVE-2005-1361 describes multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 (ASP) that allow remote attackers to execute arbitrary SQL via the parameters intProdID (in product.asp) or strCatalog_NAME (in productsByCategory.asp). The vulnerability affects the remote web application’s dat...