CVE-2006-5953

SQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the zoneid parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-11-17

Last modified

2024-08-07

Affected products

• Evolve Merchant (Lynx Internet Solutions)

References

• http://s-a-p.ca/index.php?page=OurAdvisories&id=28
• http://secunia.com/advisories/22912
• http://www.securityfocus.com/archive/1/451549/100/100/threaded
• http://www.securityfocus.com/archive/1/453549/100/0/threaded
• http://www.securityfocus.com/bid/21070/info
• http://www.vupen.com/english/advisories/2006/4530
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30272