PT-2006-4654 · Amazing Flash · Amazing Flash Afcommerce Shopping Cart

Sledge · Publicado 2006-07-21 · Atualizado 2024-08-07 · CVE-2006-3794

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Amazing Flash AFCommerce Shopping Cart (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via the search field, potentially leading to unauthorized access or data manipulation. However, the vendor has disputed this issue, stating that any SQL injection code entered would never be queried.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3794

Produtos afetados

Amazing Flash Afcommerce Shopping Cart

Referências · 9

• http://securityreason.com/securityalert/1255 · Nota
• http://securityfocus.com/archive/1/440848/100/100/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3794 · Nota de Segurança
• http://securityfocus.com/archive/1/440589/100/0/threaded · Nota
• https://t.me/cvenotify/89799 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27846 · Nota
• http://securityfocus.com/bid/19074 · Nota
• http://securitytracker.com/id?1016538 · Nota
• http://osvdb.org/28618 · Nota