CVE-2006-5991

Published: Nov 21, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL commands via the (1) prodtype parameter in prodtype.asp and the (2) product parameter in product.asp.

Affected (1)

Products: Cactusoft: Cactushop

Cactusoft

1 product

Cactushop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cactusoft Cactushop	All versions

References (14)

http://aria-security.net/advisory/WWWeb%20Cocepts.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/22895

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1887

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451513/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21076

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4528

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30261

Source: cve@mitre.org

http://aria-security.net/advisory/WWWeb%20Cocepts.txt