CVE-2006-6031

Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions GCIS ASPCart allow remote attackers to execute arbitrary SQL commands via 1 the prodid parameter in a prodetails.asp; 2 the page parameter in b display.asp; the 3 custid, 4 item, 5 price, 6 custom, 7 department, 8...

CVE-2006-6031

CVE-2006-6031 affects Greater Cincinnati Internet Solutions (GCIS) ASPCart, where multiple SQL injection flaws exist in the web storefront. The exposed vectors include parameters in prodetails.asp (prodid), display.asp (page), addcart.asp (custid, item, price, custom, department, start, quantity,...

CVE-2006-6031

Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions GCIS ASPCart allow remote attackers to execute arbitrary SQL commands via 1 the prodid parameter in a prodetails.asp; 2 the page parameter in b display.asp; the 3 custid, 4 item, 5 price, 6 custom, 7 department, 8...