Unscored severity · published Nov 17, 2006
CVE-2006-5953
SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter
–
CVSS
1.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Evolve Merchant · Lynx Internet Solutions
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5953
Exploit
http://s-a-p.ca/index.php?page=OurAdvisories&id=28
Vendor Advisory
http://secunia.com/advisories/22912
www.securityfocus.com
http://www.securityfocus.com/archive/1/451549/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/453549/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21070/info
www.vupen.com
http://www.vupen.com/english/advisories/2006/4530
More from Evolve Merchant
–
CVE-2006-6207
SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter