Lucene search
HistoryNov 24, 2006 - 5:07 p.m.
CVE-2006-6073
cve
sql injection
enthrallweb
eshopping cart
productid
categoryid
vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.0%
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter in productdetail.asp or the (2) categoryid parameter in products.asp.
Affected configurations
Node
enthrallwebeshopping_cartMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| enthrallweb:eshopping_cart | enthrallweb eshopping cart | eq | - |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.0%
Related for CVE-2006-6073