EUVD-2005-3732

Malware in sbrugna...

CVE-2005-3735: Undefined Security Weakness

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the 1 productid parameter in shopaddtocart.asp, 2 strpemail parameter in shopprojectlogin.asp, and 3 id parameter in shoptellafriend.asp...