← back
CVE-2006-6207

CVE-2006-6207

EPSS 1.2%
SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/29197unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://securityreason.com/securityalert/1933https://exchange.xforce.ibmcloud.com/vulnerabilities/30540http://www.securityfocus.com/archive/1/452706/100/0/threadedhttp://www.securityfocus.com/archive/1/453549/100/0/threadedhttp://www.securityfocus.com/bid/21323