CVE-2006-3794

SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field

published July 21, 2006

CVSS
—
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, stating "if someone were to type in any sql injection code, that code would never be queried.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01590 · 75.5th percentile
Published
2006-07-21T21:00Z
EPSS history
Timeline
  • 21 JUL 21:00Z
    SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field
    cvelistv5