Lucene search
HistoryNov 17, 2006 - 1:07 a.m.
CVE-2006-5962
hpecs
shopping cart
sql injection
vulnerability
nvd
cve-2006-5962
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.5%
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Affected configurations
Node
hpecs_shopping_carthpecs_shopping_cart
| CPE | Name | Operator | Version |
|---|---|---|---|
| hpecs_shopping_cart:hpecs_shopping_cart | hpecs shopping cart | eq | * |
References
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.5%
Related for CVE-2006-5962