CVE-2006-5962: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields in the a login screen, and 3 searchstring parameter in b insearchlist.asp...