high7.5
CVE-2006-6206
SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
Impact
SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Warhound | Warhound General Shopping Cart | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23140
- http://securityreason.com/securityalert/1932
- http://www.aria-security.com/forum/showthread.php?t=48
- http://www.securityfocus.com/archive/1/452707/100/0/threaded
- http://www.securityfocus.com/bid/21324
- http://www.vupen.com/english/advisories/2006/4740
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30542
- http://secunia.com/advisories/23140
- http://securityreason.com/securityalert/1932
- http://www.aria-security.com/forum/showthread.php?t=48
- http://www.securityfocus.com/archive/1/452707/100/0/threaded
- http://www.securityfocus.com/bid/21324
- http://www.vupen.com/english/advisories/2006/4740
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30542