ID CVE-2006-3234
Type cve
Reporter NVD
Modified 2017-07-19T21:32:09
Description
Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) produkt, (2) id_produc, and (3) id_kat parameters.
{"id": "CVE-2006-3234", "bulletinFamily": "NVD", "title": "CVE-2006-3234", "description": "Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) produkt, (2) id_produc, and (3) id_kat parameters.", "published": "2006-06-27T06:05:00", "modified": "2017-07-19T21:32:09", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-3234", "reporter": "NVD", "references": ["http://securitytracker.com/id?1016350", "http://www.securityfocus.com/bid/18743", "http://www.vupen.com/english/advisories/2006/2616", "https://exchange.xforce.ibmcloud.com/vulnerabilities/27280", "http://pridels0.blogspot.com/2006/06/fineshop-vuln.html"], "cvelist": ["CVE-2006-3234"], "type": "cve", "lastseen": "2017-07-20T10:49:23", "history": [{"bulletin": {"assessment": {"href": "", "name": "", "system": ""}, "bulletinFamily": "NVD", "cpe": ["cpe:/a:looknet:fineshop:3.0"], "cvelist": ["CVE-2006-3234"], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) produkt, (2) id_produc, and (3) id_kat parameters.", "edition": 1, "enchantments": {}, "hash": "e8b985e482332f137d34facf4ba868aa4c87b572bb17245360e4f5053d6fd0ba", "hashmap": [{"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "scanner"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "reporter"}, {"hash": "31b75fef205be7357fdc1291afc1c5ff", "key": "href"}, {"hash": "92b497c5878714c5a0773455d25463b0", "key": "modified"}, {"hash": "6d3f4796275bb54c21a33b82f399cc6d", "key": "assessment"}, {"hash": "e5d275b3ebd62646b78320753699e02e", "key": "cvss"}, {"hash": "7e2eedea9f5e8825ad3074eced7d3ff2", "key": "title"}, {"hash": "b211c0388a974fb161242392376f8348", "key": "cvelist"}, {"hash": "1716b5fcbb7121af74efdc153d0166c5", "key": "type"}, {"hash": "3d57245dd945a9ed10dca806b3a057aa", "key": "references"}, {"hash": "601892ece72be3be2f57266ca2354792", "key": "bulletinFamily"}, {"hash": "ef6510f854fc1a1ed64d9edc036c9ef7", "key": "cpe"}, {"hash": "2ff8cb99f0a646e95e50b3fc61ec7f68", "key": "description"}, {"hash": "fceec77aa42b1ebaed7f9f70f003d8a3", "key": "published"}], "history": [], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-3234", "id": "CVE-2006-3234", "lastseen": "2016-09-03T07:09:30", "modified": "2011-03-07T21:38:08", "objectVersion": "1.2", "published": "2006-06-27T06:05:00", "references": ["http://securitytracker.com/id?1016350", "http://www.securityfocus.com/bid/18743", "http://www.vupen.com/english/advisories/2006/2616", "http://xforce.iss.net/xforce/xfdb/27280", "http://pridels0.blogspot.com/2006/06/fineshop-vuln.html"], "reporter": "NVD", "scanner": [], "title": "CVE-2006-3234", "type": "cve", "viewCount": 0}, "differentElements": ["references", "modified"], "edition": 1, "lastseen": "2016-09-03T07:09:30"}], "edition": 2, "hashmap": [{"key": "assessment", "hash": "6d3f4796275bb54c21a33b82f399cc6d"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "ef6510f854fc1a1ed64d9edc036c9ef7"}, {"key": "cvelist", "hash": "b211c0388a974fb161242392376f8348"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "2ff8cb99f0a646e95e50b3fc61ec7f68"}, {"key": "href", "hash": "31b75fef205be7357fdc1291afc1c5ff"}, {"key": "modified", "hash": "5d9ce1a858ff4f5b823683b5249c461e"}, {"key": "published", "hash": "fceec77aa42b1ebaed7f9f70f003d8a3"}, {"key": "references", "hash": "067d0334c883de635495ed41fdc42621"}, {"key": "reporter", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "scanner", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "title", "hash": "7e2eedea9f5e8825ad3074eced7d3ff2"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "c8447ac4e6619bc3c2a823231670fc4ecf8888eddc30abc5f4b7d92eb9f1b55b", "viewCount": 0, "enchantments": {"vulnersScore": 7.5}, "objectVersion": "1.3", "cpe": ["cpe:/a:looknet:fineshop:3.0"], "assessment": {"href": "", "name": "", "system": ""}, "scanner": []}
{"result": {"osvdb": [{"id": "OSVDB:26920", "type": "osvdb", "title": "FineShop index.php Multiple Variable SQL Injection", "description": "# No description provided by the source\n\n## References:\nVendor URL: http://fineshop.pl/\n[Secunia Advisory ID:20901](https://secuniaresearch.flexerasoftware.com/advisories/20901/)\n[Related OSVDB ID: 26919](https://vulners.com/osvdb/OSVDB:26919)\nOther Advisory URL: http://pridels.blogspot.com/2006/06/fineshop-vuln.html\nFrSIRT Advisory: ADV-2006-2616\n[CVE-2006-3234](https://vulners.com/cve/CVE-2006-3234)\n", "published": "2006-06-21T09:19:03", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:26920", "cvelist": ["CVE-2006-3234"], "lastseen": "2017-04-28T13:20:23"}]}}