PT-2006-4654 · Amazing Flash · Amazing Flash Afcommerce Shopping Cart

Sledge · Published 2006-07-21 · Updated 2024-08-07 · CVE-2006-3794

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Amazing Flash AFCommerce Shopping Cart (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via the search field, potentially leading to unauthorized access or data manipulation. However, the vendor has disputed this issue, stating that any SQL injection code entered would never be queried.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3794

Affected Products

Amazing Flash Afcommerce Shopping Cart

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-3794 · Security Note
• http://securityreason.com/securityalert/1255 · Note
• http://securityfocus.com/archive/1/440848/100/100/threaded · Note
• http://securityfocus.com/archive/1/440589/100/0/threaded · Note
• https://t.me/cvenotify/89799 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27846 · Note
• http://securityfocus.com/bid/19074 · Note
• http://securitytracker.com/id?1016538 · Note
• http://osvdb.org/28618 · Note