Beveiligingsadvies

CVE-2006-1706

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-04-11 10:00:00

Laatst bijgewerkt 2024-08-07 17:19:49

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.

← Alle CVE's bekijken Bekijk op cve.org ↗