CVE-2006-0087 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 4% (pctl 90)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 4.04% — more likely to be exploited than 90% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-01-05 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| lizard cart | lizard cart cms |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Lizard Cart - Multiple SQL Injections | 2009-12-19 |
References
- http://secunia.com/advisories/18297
- http://securityreason.com/securityalert/314
- http://securitytracker.com/id?1015435
- http://www.evuln.com/vulns/12/summary.html
- http://www.osvdb.org/22199
- http://www.osvdb.org/22200
- http://www.securityfocus.com/archive/1/420772/100/0/threaded
- http://www.securityfocus.com/bid/16140
- http://www.vupen.com/english/advisories/2006/0029
- http://secunia.com/advisories/18297
- http://securityreason.com/securityalert/314
- http://securitytracker.com/id?1015435
- http://www.evuln.com/vulns/12/summary.html
- http://www.osvdb.org/22199
- http://www.osvdb.org/22200
- http://www.securityfocus.com/archive/1/420772/100/0/threaded
- http://www.securityfocus.com/bid/16140
- http://www.vupen.com/english/advisories/2006/0029
→ the Explorer · watch your stack · NVD