CVE-2006-1685

The CVE-2006-1685 entry concerns the APT-webshop-system (versions 4.0 PRO, 3.0 BASIC, 3.0 LIGHT) where the vulnerability is in modules.php. The underlying issue is SQL injection via the parameters (1) group, (2) seite, and (3) id, potentially involving the artikel functionality. This allows remot...

CVE-2006-1686

CVE-2006-1686 affects APT-webshop-system modules.php in version 4.0 PRO and 3.0 BASIC/3.0 LIGHT. The vulnerability allows remote attackers to access unspecified files by modifying a warp parameter. The description does not specify the root cause, exact file paths, or the impact beyond file access...

CVE-2006-1687

CVE-2006-1687 affects APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT. The vulnerability is a Cross-site Scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via the message parameter, likely involving the basket functionality. The NVD entry lists a MEDIUM seve...