E-commerce Kit 1 PayPal Edition [ injection sql ]

2006.11.25
Credit: laurent gaffi & benjamin moss
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2006-6034
CWE: CWE-Other


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

vendor site:http://www.sitesoutlet.com/ product:E-commerce Kit 1 PayPal Edition bug:injection sql risk:medium injection sql : http://site.com/PATH/catalogue.asp?keyword='[sql] http://site.com/PATH/catalogue.asp?cid='[sql] http://site.com/PATH//viewDetail.asp?pid='[sql] laurent gaffi & benjamin moss http://s-a-p.ca/ contact: saps.audit (at) gmail (dot) com [email concealed]


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top