CVE

Id
17202  
CVE No.
CVE-2006-1098  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher"s blog, but research by CVE suggests that this might be a legitimate problem.  
Phase
Assigned (20060309)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
141216 17202 CVE-2006-1098 MISC:http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html  View
141217 17202 CVE-2006-1098 BID:16931  View
141218 17202 CVE-2006-1098 URL:http://www.securityfocus.com/bid/16931  View
141219 17202 CVE-2006-1098 VUPEN:ADV-2006-0803  View
141220 17202 CVE-2006-1098 URL:http://www.vupen.com/english/advisories/2006/0803  View
141221 17202 CVE-2006-1098 OSVDB:23601  View
141222 17202 CVE-2006-1098 URL:http://www.osvdb.org/23601  View
141223 17202 CVE-2006-1098 SECUNIA:19088  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61636 JVNDB-2006-003902 Sauerbraten におけるバッファオーバーフローの脆弱性 Sauerbraten には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-1100 17202 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003902.html  View