CVE-2006-5772

Published: Nov 6, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) prod parameter.

Affected (1)

Products: Freewebshop: Freewebshop

Freewebshop

1 product

Freewebshop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freewebshop Freewebshop	Up to 2.2.1

References (10)

http://secunia.com/advisories/22664

Source: cve@mitre.org

Vendor Advisory

http://www.freewebshop.org/index.php?id=27

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4332

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29990

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2704

Source: cve@mitre.org

http://secunia.com/advisories/22664