CVE

Id
19898  
CVE No.
CVE-2006-3794  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, stating "if someone were to type in any sql injection code, that code would never be queried."  
Phase
Assigned (20060721)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
182058 19898 CVE-2006-3794 BUGTRAQ:20060719 AFCommerce Shopping Cart  View
182059 19898 CVE-2006-3794 URL:http://www.securityfocus.com/archive/1/archive/1/440589/100/0/threaded  View
182060 19898 CVE-2006-3794 BUGTRAQ:20060720 Re: AFCommerce Shopping Cart  View
182061 19898 CVE-2006-3794 URL:http://www.securityfocus.com/archive/1/archive/1/440848/100/100/threaded  View
182062 19898 CVE-2006-3794 BID:19074  View
182063 19898 CVE-2006-3794 URL:http://www.securityfocus.com/bid/19074  View
182064 19898 CVE-2006-3794 OSVDB:28618  View
182065 19898 CVE-2006-3794 URL:http://www.osvdb.org/28618  View
182066 19898 CVE-2006-3794 SECTRACK:1016538  View
182067 19898 CVE-2006-3794 URL:http://securitytracker.com/id?1016538  View
182068 19898 CVE-2006-3794 SREASON:1255  View
182069 19898 CVE-2006-3794 URL:http://securityreason.com/securityalert/1255  View
182070 19898 CVE-2006-3794 XF:afcommerce-search-sql-injection(27846)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60617 JVNDB-2006-002883 DeluxeBB における "スペース" ユーザとしてログインされる脆弱性 DeluxeBB は、単一のスペース文字のユーザ名を適切に処理しないため、"スペース" ユーザとしてログインされる、ゲストユーザとして投稿される、および "スペース" ユーザを管理者が禁止することをブロックする脆弱性が存在します。 CVE-2006-3796 19898 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002883.html  View