NVD

Id
64537  
Name
CVE-2006-5962  
Description
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-16  
Modified Date
2011-03-07  
Seq
2006-5962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336835 64537 CVE-2006-5962 2782  View
336836 64537 CVE-2006-5962 1879  View
336837 64537 CVE-2006-5962 20061114 hpecs shopping cart[login bypass & injection sql (post)]  View
336838 64537 CVE-2006-5962 ADV-2006-4535  View
336839 64537 CVE-2006-5962 hpecs-adminlogin-sql-injection(30287)  View
336840 64537 CVE-2006-5962 hpecs-searchlist-sql-injection(30288)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60159 JVNDB-2006-002425 Hpecs Shopping Cart における SQL インジェクションの脆弱性 Hpecs Shopping Cart には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5962 22064 CVE-2006-5962 64537 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002425.html 2006-11-16 2012-09-25 View