← volver
CVE-2006-5962

CVE-2006-5962

EPSS 1.3%
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 1
cve_referencewww.exploit-db.com/exploits/2782no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://secunia.com/advisories/22904http://securityreason.com/securityalert/1879https://exchange.xforce.ibmcloud.com/vulnerabilities/30287https://exchange.xforce.ibmcloud.com/vulnerabilities/30288https://www.exploit-db.com/exploits/2782http://www.securityfocus.com/archive/1/451595/100/0/threadedhttp://www.vupen.com/english/advisories/2006/4535