CVEvulnerability

CVE-2006-1685

7.5 HIGH Published 2006-04-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-04-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the (1) group, (2) seite, and (3) id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows resultant path disclosure when the SQL queries are invalid.

Affected configurations

• apt apt-webshop-system 3.0 • apt apt-webshop-system 4.0

References

http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html pridels0.blogspot.com
http://secunia.com/advisories/19592 Vendor Advisory
http://www.securityfocus.com/bid/17425 www.securityfocus.com
http://www.vupen.com/english/advisories/2006/1293 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25731 exchange.xforce.ibmcloud.com
http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html pridels0.blogspot.com
http://secunia.com/advisories/19592 Vendor Advisory
http://www.securityfocus.com/bid/17425 www.securityfocus.com
http://www.vupen.com/english/advisories/2006/1293 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25731 exchange.xforce.ibmcloud.com