CVE-2006-5772

The CVE-2006-5772 entry describes SQL injection vulnerabilities in FreeWebshop 2.2.1 and earlier, exploitable via index.php arguments (1) password and (2) prod. The underlying issue allows remote attackers to execute arbitrary SQL commands. Affected product: FreeWebshop (version up to 2.2.1 or ea...