Lucene search
MitreCVE-2006-5962HistoryNov 17, 2006 - 1:07 a.m.
CVE-2006-5962
2006-11-1701:07:00
mitre
web.nvd.nist.gov
22
hpecs
shopping cart
sql injection
vulnerability
nvd
cve-2006-5962
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.005
Percentile
77.5%
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Affected configurations
Node
hpecs_shopping_carthpecs_shopping_cart
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hpecs_shopping_cart | hpecs_shopping_cart | * | cpe:2.3:a:hpecs_shopping_cart:hpecs_shopping_cart:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2006-5962
2006-11-17 01:00:00
exploitdb
exploitdb
Hpecs Shopping Cart - Remote Authentication Bypass
2006-11-14 00:00:00
nvd
nvd
CVE-2006-5962
2006-11-17 01:07:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.9
Confidence
Low
EPSS
0.005
Percentile
77.5%
Related for CVE-2006-5962