CVE-2006-6074

The CVE-2006-6074 entry concerns Enthrallweb eShopping Cart with multiple SQL injection vulnerabilities. The connected PT-2006-6719 document specifies the vulnerable vectors: user-supplied input in ProductID for reviews.asp, and in cat_id/sub_id for subProducts.asp. The root cause is unsanitized ...