CVE-2006-1706

CVE-2006-1706 affects Shopweezle 2.0. The vulnerability is a SQL injection in multiple parameters: (1) itemID used in login.php and memo.php; and (2) itemgr, brandID, and album used in index.php. The issues can allow remote attackers to execute arbitrary SQL commands and may cause full path discl...