CVE-2006-1685

🗓️ 10 Apr 2006 23:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 50 Views🌐 WEB

CVE-2006-1685: SQL injection in APT-webshop-system modules.ph

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2006-1685	10 Apr 200623:00	–	cvelist
Exploit DB	APT-webshop 3.0/4.0 - 'modules.php' Multiple SQL Injections	10 Apr 200500:00	–	exploitdb
EUVD	EUVD-2006-1686	7 Oct 202500:30	–	euvd
NVD	CVE-2006-1685	11 Apr 200600:02	–	nvd
Prion	Sql injection	11 Apr 200600:02	–	prion

NVD

Node

OR

apt apt-webshop-systemMatch3.0basic

apt apt-webshop-systemMatch3.0light

apt apt-webshop-systemMatch4.0pro

Source	Link
securityfocus	www.securityfocus.com/bid/17425
vupen	www.vupen.com/english/advisories/2006/1293
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/25731
pridels0	www.pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html
secunia	www.secunia.com/advisories/19592

Parameter	Position	Path	Description	CWE
group	query param	modules.php?warp=artikel&group=[SQL]	SQL injection vulnerability via group parameter in modules.php?warp=artikel	CWE-89
group	query param	modules.php?warp=artikel&group=&seite=[SQL]	SQL injection vulnerability via group or seite parameter in modules.php?warp=artikel	CWE-89
seite	query param	modules.php?warp=artikel&group=&seite=[SQL]	SQL injection vulnerability via group or seite parameter in modules.php?warp=artikel	CWE-89
group	query param	modules.php?warp=artikel&group=&seite=&id=[SQL]	SQL injection vulnerability via group, seite and id parameters in modules.php?warp=artikel	CWE-89
seite	query param	modules.php?warp=artikel&group=&seite=&id=[SQL]	SQL injection vulnerability via group, seite and id parameters in modules.php?warp=artikel	CWE-89
id	query param	modules.php?warp=artikel&group=&seite=&id=[SQL]	SQL injection vulnerability via group, seite and id parameters in modules.php?warp=artikel	CWE-89

16 Jun 2026 22:23Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

EPSS0.01123

cve-2006-1685 sql injection apt-webshop-system remote code execution path disclosure