Описание
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-5962
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30288
- https://www.exploit-db.com/exploits/2782
- http://secunia.com/advisories/22904
- http://securityreason.com/securityalert/1879
- http://www.securityfocus.com/archive/1/451595/100/0/threaded
- http://www.vupen.com/english/advisories/2006/4535
EPSS
Процентиль: 68%
0.01314
Низкий
CVE ID
Связанные уязвимости
nvd
больше 19 лет назад
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
EPSS
Процентиль: 68%
0.01314
Низкий