Secunia

Two vulnerabilities have been identified in ProductCart, which can be exploited by malicious people to conduct SQL injection attacks.

Due to an input validation error in "cutsva.asp", it is possible to insert arbitrary SQL code, which potentially could lead to disclosure of sensitive information or allow manipulation of existing data.

Example:
http://[victim]/productcart/pc/Custvb.asp?redirectUrl=&Email=%27+having+1%3D1--&_email=email&password=asd&_password=required&Submit.x=33&Submit.y=5&Submit=Submit

However, it is also possible for malicious people to bypass user authentication and gain access to the administrative interface. The problem is that "login.asp" doesn't perform adequate input validation, which can be exploited by a classical SQL injection attack.

Example:
http://[victim]/produccart/pdacmin/login.asp?idadmin='' or 1=1--

The vulnerabilities have been reported to affect version 2 and prior.

Solution
A fix has been released for the first vulnerability:
Further details available in Customer Area

Provided and/or discovered by
Bosen

Original Advisory
http://bosen.net/releases/?id=40

Deep Links
Links available in Customer Area