CVE

Id
22311  
CVE No.
CVE-2006-6207  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error.  
Phase
Assigned (20061130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215696 22311 CVE-2006-6207 BUGTRAQ:20061126 [Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability  View
215697 22311 CVE-2006-6207 URL:http://www.securityfocus.com/archive/1/archive/1/452706/100/0/threaded  View
215698 22311 CVE-2006-6207 BUGTRAQ:20061205 Re: Evolve Merchant[ injection sql ]  View
215699 22311 CVE-2006-6207 URL:http://www.securityfocus.com/archive/1/archive/1/453549/100/0/threaded  View
215700 22311 CVE-2006-6207 BID:21323  View
215701 22311 CVE-2006-6207 URL:http://www.securityfocus.com/bid/21323  View
215702 22311 CVE-2006-6207 SREASON:1933  View
215703 22311 CVE-2006-6207 URL:http://securityreason.com/securityalert/1933  View
215704 22311 CVE-2006-6207 XF:evolve-products-sql-injection(30540)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60208 JVNDB-2006-002474 MidiCart ASP Shopping Cart などにおける SQL インジェクションの脆弱性 MidiCart ASP Shopping Cart および ASP Plus Shopping Cart には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6209 22311 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002474.html  View