CVE-2006-1098

Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory…

published March 9, 2006

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01150 · 66.6th percentile
Published
2006-03-09T11:00Z
EPSS history
Timeline
  • 09 MAR 11:00Z
    Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory…
    cvelistv5