← back
CVE-2006-5962

CVE-2006-5962

EPSS 1.3%
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/2782unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/22904http://securityreason.com/securityalert/1879https://exchange.xforce.ibmcloud.com/vulnerabilities/30287https://exchange.xforce.ibmcloud.com/vulnerabilities/30288https://www.exploit-db.com/exploits/2782http://www.securityfocus.com/archive/1/451595/100/0/threadedhttp://www.vupen.com/english/advisories/2006/4535