Lucene search

K
cve[email protected]CVE-2006-6206
HistoryDec 01, 2006 - 1:28 a.m.

CVE-2006-6206

2006-12-0101:28:00
web.nvd.nist.gov
27
cve-2006-6206
sql injection
warhound
general shopping cart
itemid parameter
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.6%

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.

Affected configurations

NVD
Node
warhoundwarhound_general_shopping_cart

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.6%

Related for CVE-2006-6206