CVE-2006-5957

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.2%

from disclosure to weapon0 days

Published on NVDNov 17

1st PoCNov 13

exploitation probability

1.2%top 34% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1) groupid parameter in (a) browse_group.asp, (2) productid parameter in (b) added_to_cart.asp, and (3) catid and (4) subid parameter in (c) browsesubcat.asp. NOTE: the vendor has disputed this report, saying "The vulnerabilities mentioned were never present in our official released products but only in the unofficial demo version. However we do appreciate the information. We have update our demo version and made sure all those vulnerabilities are fixed.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28993 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28994 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28992

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/22865 http://securityreason.com/securityalert/1881 http://www.attrition.org/pipermail/vim/2006-December/001162.html http://www.securityfocus.com/archive/1/451322/100/0/threaded http://www.securityfocus.com/bid/21043 http://www.vupen.com/english/advisories/2006/4501