CVE-2006-2046

CVE-2006-2046 affects Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier. The vulnerability is a set of SQL injection flaws allowing remote attackers to execute arbitrary SQL via unsanitized input in: (a) Results.cfm with the parameters category and keywords , and (b) Details.cfm with...

CVE-2006-2047

The CVE-2006-2047 entry affects Application Dynamics Cartweaver ColdFusion versions 2.16.11 and earlier. The vulnerability arises via invalid input parameters in Results.cfm (secondary, PageNum_Results, category, keywords) and Details.cfm (ProdID), which can cause error messages that disclose int...