exploitDog

CVE-2006-6207

Опубликовано: 01 дек. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lynx_internet_solutions:evolve_merchant:*:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.00994

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7f9m-x89m-cpp8

github

почти 4 года назад

** DISPUTED ** SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error.

EPSS

Процентиль: 77%

0.00994

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other