CVE-2006-5891

Description (CNA)

SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.vupen.com/english/advisories/2006/4479
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30187
• http://www.securityfocus.com/archive/1/451307/100/0/threaded
• https://www.exploit-db.com/exploits/2763
• http://www.securityfocus.com/archive/1/451519/100/0/threaded
• http://secunia.com/advisories/22838
• http://securityreason.com/securityalert/1851

ADP enrichment