high7.5Public exploit code
CVE-2006-5962
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hpecs Shopping Cart - Remote Authentication Bypass2006-11-14 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hpecs Shopping Cart | Hpecs Shopping Cart | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22904
- http://securityreason.com/securityalert/1879
- http://www.securityfocus.com/archive/1/451595/100/0/threaded
- http://www.vupen.com/english/advisories/2006/4535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30288
- https://www.exploit-db.com/exploits/2782
- http://secunia.com/advisories/22904
- http://securityreason.com/securityalert/1879
- http://www.securityfocus.com/archive/1/451595/100/0/threaded
- http://www.vupen.com/english/advisories/2006/4535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30288
- https://www.exploit-db.com/exploits/2782