CVE-2006-2827

creationtimestamp| type| source ---|---|--- 2025-01-18 14:44:16+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzkbv44772z...

CVE-2006-2827

An SQL injection vulnerability exists in the search.php component of X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 . Remote attackers can execute arbitrary SQL commands via the "Search for pattern" field specifically when the settings are configured to only include "Search in Detailed ...