EUVD-2006-4858

Malware in sbrugna...

EShoppingProv1.0.txt

Vulnerability Report Title : EShoppingPro v1.0searchrun.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.keyvan1.com Exploit;...

CVE-2006-4871

SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-4871

SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-4871

CVE-2006-4871 is a SQL injection vulnerability in the Keyvan1 EShoppingPro 1.0 product, specifically in search_run.asp. The issue allows remote attackers to modify the underlying SQL logic via the order parameter, potentially enabling arbitrary SQL execution. The available documents identify the ...

EShoppingPro 1.0 - 'Search_Run.asp' SQL Injection

source: https://www.securityfocus.com/bid/20089/info EShoppingPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit this issue to modify the logic of SQL queries...