NVD

Id
64592  
Name
CVE-2006-6031  
Description
Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions (GCIS) ASPCart allow remote attackers to execute arbitrary SQL commands via (1) the prodid parameter in (a) prodetails.asp; (2) the page parameter in (b) display.asp; the (3) custid, (4) item, (5) price, (6) custom, (7) department, (8) start, (9) quantity, (10) submit, (11) custom1, (12) custom2, or (13) custom3 parameters in (c) addcart.asp; or the (14) customerid parameter in (d) payment.asp.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-21  
Modified Date
2011-03-07  
Seq
2006-6031  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
337099 64592 CVE-2006-6031 1899  View
337100 64592 CVE-2006-6031 20061114 ASP Cart [multiples injection sql (post & get)]  View
337101 64592 CVE-2006-6031 21152  View
337102 64592 CVE-2006-6031 ADV-2006-4580  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59321 JVNDB-2006-001587 GCIS ASPCart における SQL インジェクションの脆弱性 Greater Cincinnati Internet Solutions (GCIS) ASPCart には、SQL インジェクションの脆弱性が存在します。 CVE-2006-6031 22133 CVE-2006-6031 64592 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001587.html 2006-11-21 2012-06-26 View