CVE-2006-5935

CVE-2006-5935 is a SQL injection vulnerability in ShopSystems 4.0 and earlier . The flaw occurs in the application’s index.php where the sessid parameter enables remote attackers to execute arbitrary SQL commands. The NVD metrics indicate a base score 7.5 (HIGH) with network access, low attack co...