CVE-2006-6034

Published: Nov 21, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute arbitrary SQL commands via the (1) keyword or (2) cid parameter in (a) catalogue.asp, or the (3) pid parameter in (b) viewDetail.asp.

Affected (1)

Products: Sitesoutlet: E Commerce Kit 1

1 product

E Commerce Kit 1

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sitesoutlet E Commerce Kit 1	Version paypal_edition

References (10)

http://secunia.com/advisories/22975

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1900

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/451771/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21056

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4571

Source: cve@mitre.org

http://secunia.com/advisories/22975

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1900

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/451771/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21056

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4571

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.