CVE-2006-5962

Published: Nov 17, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.

Affected (1)

Products: Hpecs Shopping Cart: Hpecs Shopping Cart

Hpecs Shopping Cart

1 product

Hpecs Shopping Cart

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hpecs Shopping Cart Hpecs Shopping Cart	All versions

References (14)

http://secunia.com/advisories/22904

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1879

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451595/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4535

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30287

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30288

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2782

Source: cve@mitre.org

http://secunia.com/advisories/22904