EUVD-2005-3732

Malware in sbrugna...

CVE-2005-3735: Undefined Security Weakness

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the 1 productid parameter in shopaddtocart.asp, 2 strpemail parameter in shopprojectlogin.asp, and 3 id parameter in shoptellafriend.asp...

CVE-2005-3736: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the 1 strgifttoname parameter in shopgift.asp, 2 strfirstname parameter in shopmaillist.asp, 3 strpid parameter in shopprojectlogin.asp, and 4 Custname parameter in...