CVE-2006-6074 in eShopping Cart
Résumé
par MITRE
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.