high7.5
CVE-2006-1949
SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Impact
SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nicplex | Plexcart | through x3 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2006/04/plexcart-x3-sql-inj.html
- http://secunia.com/advisories/18033
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25917
- http://pridels0.blogspot.com/2006/04/plexcart-x3-sql-inj.html
- http://secunia.com/advisories/18033
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25917