CVEvulnerability
CVE-2006-6109
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) policy parameter in openPolicy.asp or the (2) brand parameter in prodList.asp.
Affected configurations
• candypress candypress store 3.5.2.14
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://marc.info/?l=bugtraq&m=116372253323469&w=2 Mailing List
- http://s-a-p.ca/index.php?page=OurAdvisories&id=25 Broken Link, URL Repurposed
- http://secunia.com/advisories/22954 Exploit
- http://www.securityfocus.com/bid/21090/info Exploit, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4577 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30346 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=116372253323469&w=2 Mailing List
- http://s-a-p.ca/index.php?page=OurAdvisories&id=25 Broken Link, URL Repurposed
- http://secunia.com/advisories/22954 Exploit
- http://www.securityfocus.com/bid/21090/info Exploit, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4577 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30346 exchange.xforce.ibmcloud.com