high7.5Public exploit code
CVE-2006-4882
SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Charon Cart 3.0 - 'Review.asp' SQL Injection2006-09-17 · webapps · asp · Verified
Impact
SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Charon Internet | Charon Cart | Version 3 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21987
- http://securityreason.com/securityalert/1606
- http://securitytracker.com/id?1016881
- http://www.securityfocus.com/archive/1/446254/100/0/threaded
- http://www.securityfocus.com/bid/20083
- http://www.vupen.com/english/advisories/2006/3683
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28980
- http://secunia.com/advisories/21987
- http://securityreason.com/securityalert/1606
- http://securitytracker.com/id?1016881
- http://www.securityfocus.com/archive/1/446254/100/0/threaded
- http://www.securityfocus.com/bid/20083
- http://www.vupen.com/english/advisories/2006/3683
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28980