CVE-2006-5991

CVE-2006-5991 describes multiple SQL injection vulnerabilities in the wwweb Concepts CactuShop application, enabling remote attackers to alter or extract data by supplying crafted values to the following parameters: (1) prodtype in prodtype.asp and (2) product in product.asp. The connected docume...