CVE-2006-6207

Description

SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30540

http://www.securityfocus.com/archive/1/453549/100/0/threaded

http://www.securityfocus.com/archive/1/452706/100/0/threaded

http://securityreason.com/securityalert/1933

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS