CVE-2006-5962 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.3% (pctl 70)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.31% — more likely to be exploited than 70% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-11-17 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| hpecs shopping cart | hpecs shopping cart |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Hpecs Shopping Cart - Remote Authentication Bypass | 2006-11-14 |
References
- http://secunia.com/advisories/22904
- http://securityreason.com/securityalert/1879
- http://www.securityfocus.com/archive/1/451595/100/0/threaded
- http://www.vupen.com/english/advisories/2006/4535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30288
- https://www.exploit-db.com/exploits/2782
- http://secunia.com/advisories/22904
- http://securityreason.com/securityalert/1879
- http://www.securityfocus.com/archive/1/451595/100/0/threaded
- http://www.vupen.com/english/advisories/2006/4535
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30287
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30288
- https://www.exploit-db.com/exploits/2782
→ the Explorer · watch your stack · NVD