CVE-2006-5962

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.32% chance of exploitation in the next 30 days, 70th percentile

Published

2006-11-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2782

Security advisories

• http://secunia.com/advisories/22904

References

• CVE Record
• NVD entry