CVE-2006-2814

EPSS 5.6%

Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact via a large amount of posted data.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/1862unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20415 http://securityreason.com/securityalert/1031 https://exchange.xforce.ibmcloud.com/vulnerabilities/27014 http://www.securityfocus.com/archive/1/435597/100/0/threaded http://www.securityfocus.com/bid/18222 http://www.vupen.com/english/advisories/2006/2108