CVE-2006-6109

Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the 1 policy parameter in openPolicy.asp or the 2 brand parameter in prodList.asp...

CVE-2006-6109

Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the 1 policy parameter in openPolicy.asp or the 2 brand parameter in prodList.asp...

CVE-2006-6109

CandyPress Store 3.5.2.14 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the policy parameter in openPolicy.asp or the brand parameter in prodList.asp. The root cause is unprotected user-supplied input in these endpoints, en...

CVE-2006-6109: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the 1 policy parameter in openPolicy.asp or the 2 brand parameter in prodList.asp...

CandyPress Store[ multiples injection sql ]

vendor site:http://www.candypress.com/ product:CandyPress Store bug:injection sql risk:medium injection sql get : http://site.com/sa3.5.2.14/scripts/openPolicy.asp?policy='sql http://site.com/sa3.5.2.14/scripts/prodList.asp?brand='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact:...

candypress.txt

vendor site:http://www.candypress.com/ product:CandyPress Store bug:injection sql risk:medium injection sql get : http://site.com/sa3.5.2.14/scripts/openPolicy.asp?policy='sql http://site.com/sa3.5.2.14/scripts/prodList.asp?brand='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact:...

CandyPress Store 3.5.2 14 - 'openPolicy.asp?policy' SQL Injection

source: https://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

CandyPress Store 3.5.2 14 - openPolicy.asp?policy SQL Injection

CandyPress Store 3.5.2 14 - openPolicy.asp?policy SQL Injection source: https://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

CandyPress Store 3.5.2 14 - prodList.asp?brand SQL Injection

CandyPress Store 3.5.2 14 - prodList.asp?brand SQL Injection source: https://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

CandyPress Store 3.5.2 14 - 'prodList.asp?brand' SQL Injection

source: https://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...