Unscored CVE-2006-6034 EUVD-2006-6017GHSA-642h-wm2g-q6gc

Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute arbitrary SQL comma…

Published Nov 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute arbitrary SQL commands via the (1) keyword or (2) cid parameter in (a) catalogue.asp, or the (3) pid parameter in (b) viewDetail.asp.

References

21056 vdb-entry
1900 third-party-advisory
22975 third-party-advisory
ADV-2006-4571 vdb-entry
20061114 E-commerce Kit 1 PayPal Edition [ injection sql ] mailing-list