CVE-2006-1685

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL…

published April 10, 2006

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the (1) group, (2) seite, and (3) id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows resultant path disclosure when the SQL queries are invalid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01120 · 65.9th percentile
Published
2006-04-10T23:00Z
EPSS history
Timeline
  • 10 APR 23:00Z
    Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL…
    cvelistv5