CVEvulnerability

CVE-2006-5962

7.5 HIGH Published 2006-11-17 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-11-17
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.

Affected configurations

• hpecs shopping cart hpecs shopping cart

References

http://secunia.com/advisories/22904 Vendor Advisory
http://securityreason.com/securityalert/1879 securityreason.com
http://www.securityfocus.com/archive/1/451595/100/0/threaded www.securityfocus.com
http://www.vupen.com/english/advisories/2006/4535 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30287 exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30288 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/2782 www.exploit-db.com
http://secunia.com/advisories/22904 Vendor Advisory
http://securityreason.com/securityalert/1879 securityreason.com
http://www.securityfocus.com/archive/1/451595/100/0/threaded www.securityfocus.com
http://www.vupen.com/english/advisories/2006/4535 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30287 exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30288 exchange.xforce.ibmcloud.com
https://www.exploit-db.com/exploits/2782 www.exploit-db.com