SQL Injection in Enthrallweb Eshopping Cart
CVE-2006-6073
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter in productdetail.asp or the (2) categoryid parameter in products.asp.
Vulnerability class: SQL Injection
EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.
Affected products
- Enthrallweb Eshopping_cart
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC, Broken Link)