CVE-2006-5991

Опубликовано: 21 нояб. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL commands via the (1) prodtype parameter in prodtype.asp and the (2) product parameter in product.asp.

Ссылки

http://aria-security.net/advisory/WWWeb%20Cocepts.txt
Exploit
http://secunia.com/advisories/22895
Vendor Advisory
http://securityreason.com/securityalert/1887
http://www.securityfocus.com/archive/1/451513/100/100/threaded
http://www.securityfocus.com/bid/21076
http://www.vupen.com/english/advisories/2006/4528
https://exchange.xforce.ibmcloud.com/vulnerabilities/30261
http://aria-security.net/advisory/WWWeb%20Cocepts.txt
Exploit
http://secunia.com/advisories/22895
Vendor Advisory
http://securityreason.com/securityalert/1887
http://www.securityfocus.com/archive/1/451513/100/100/threaded
http://www.securityfocus.com/bid/21076
http://www.vupen.com/english/advisories/2006/4528
https://exchange.xforce.ibmcloud.com/vulnerabilities/30261

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cactusoft:cactushop:*:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01135

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-j2c3-8wqj-x5xh

github

почти 4 года назад