CVE-2006-2474

CVE-2006-2474 affects Cosmoshop’s lshop.cgi (versions 8.11.106 and earlier). The root cause is a SQL injection via the artnum parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation status is not detailed in the provided documents. No remediation or patch details are ...