CVE-2005-3735

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-22 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.

Affected products

Coastal Data Management E-Quick Cart: all versions

References

http://secunia.com/advisories/17652
http://securitytracker.com/id?1015244
http://www.osvdb.org/20997
http://www.osvdb.org/20998
http://www.osvdb.org/20999
http://www.securityfocus.com/bid/15510
http://www.vupen.com/english/advisories/2005/2506
http://secunia.com/advisories/17652
http://securitytracker.com/id?1015244
http://www.osvdb.org/20997
http://www.osvdb.org/20998
http://www.osvdb.org/20999

Get alerted when CVE-2005-3735 or the next vulnerability affects your stack