Unscored CVE-2006-0412 EUVD-2006-0419GHSA-2rfx-hp4r-397h

SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userna…

Published Jan 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action.

References

cybershop-login-sql-injection(24005) vdb-entry
20060105 CyberShop User Login Sql Injection mailing-list
22365 vdb-entry