EUVD-2006-6056

Malware in sbrugna...

CVE-2006-6073

Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter in productdetail.asp or the 2 categoryid parameter in products.asp...

CVE-2006-6074

The CVE-2006-6074 entry concerns Enthrallweb eShopping Cart with multiple SQL injection vulnerabilities. The connected PT-2006-6719 document specifies the vulnerable vectors: user-supplied input in ProductID for reviews.asp, and in cat_id/sub_id for subProducts.asp. The root cause is unsanitized ...