CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2006-5772

HIGH
7.5
CVSS Severity Score
EPSS Score0.0010%
EPSS Percentile5.46th
Published2006年11月6日
Last Modified2026年4月23日

Vulnerability Description

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) prod parameter.

Affected Platforms (CPE)

📦
Freewebshop

Freewebshop

<= 2.2.1

References & Advisories

🔗 http://secunia.com/advisories/22664
🔗 http://www.freewebshop.org/index.php?id=27
🔗 http://www.vupen.com/english/advisories/2006/4332
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/29990
🔗 https://www.exploit-db.com/exploits/2704
🔗 http://secunia.com/advisories/22664
🔗 http://www.freewebshop.org/index.php?id=27
🔗 http://www.vupen.com/english/advisories/2006/4332

相關漏洞威脅

CVE-2007-05317.5

PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attacke...

CVE-2007-64667.5

Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 allow remote attackers to execute arbitrary SQL commands ...

CVE-2006-58466.4

Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitr...

CVE-2006-58476.1

Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary...