Lucene search
MitreCVELIST:CVE-2006-6109HistoryNov 26, 2006 - 10:00 p.m.
CVE-2006-6109
2006-11-2622:00:00
mitre
www.cve.org
3
Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) policy parameter in openPolicy.asp or the (2) brand parameter in prodList.asp.
Related
cve
cve
CVE-2006-6109
2006-11-26 22:07:00
exploitdb
exploitdb
CandyPress Store 3.5.2 14 - 'prodList.asp?brand' SQL Injection
2006-11-15 00:00:00
CandyPress Store 3.5.2 14 - 'openPolicy.asp?policy' SQL Injection
2006-11-15 00:00:00
nvd
nvd
CVE-2006-6109
2006-11-26 22:07:00