CVE-2005-1221
SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field.
Date published : 2005-04-22
http://marc.info/?l=bugtraq&m=111402179605925&w=2
http://www.ihssecurity.com/download/advisory/ecomerce-cart.txt