CVE-2006-1706

Published: 11/04/2006 Updated: 20/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote malicious users to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kansok communications shopweezle 2.0 personal
kansok communications shopweezle 2.0 professional plus
kansok communications shopweezle 2.0
kansok communications shopweezle 2.0 professional

source: wwwsecurityfocuscom/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or e ...

source: wwwsecurityfocuscom/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or exp ...

source: wwwsecurityfocuscom/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or ...

NVD-CWE-Other http://www.securityfocus.com/bid/17441 http://secunia.com/advisories/19593 http://www.osvdb.org/24470 http://www.osvdb.org/24471 http://www.osvdb.org/24472 http://www.osvdb.org/24473 http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html http://www.vupen.com/english/advisories/2006/1291 https://exchange.xforce.ibmcloud.com/vulnerabilities/25724 https://exchange.xforce.ibmcloud.com/vulnerabilities/25723 https://nvd.nist.gov https://www.exploit-db.com/exploits/27613/

CVE-2006-1706

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect