CVE-2006-5962

2006-11-1701:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.

References

secunia.com/advisories/22904

securityreason.com/securityalert/1879

www.securityfocus.com/archive/1/451595/100/0/threaded

www.vupen.com/english/advisories/2006/4535

exchange.xforce.ibmcloud.com/vulnerabilities/30287

exchange.xforce.ibmcloud.com/vulnerabilities/30288

www.exploit-db.com/exploits/2782