PT-2006-4654 · Amazing Flash · Amazing Flash Afcommerce Shopping Cart

·

CVE-2006-3794

·

Published

2006-07-21

·

Updated

2024-08-07

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Amazing Flash AFCommerce Shopping Cart (affected versions not specified)
Description The issue allows remote attackers to execute arbitrary SQL commands via the search field, potentially leading to unauthorized access or data manipulation. However, the vendor has disputed this issue, stating that any SQL injection code entered would never be queried.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2006-3794

Affected Products

Amazing Flash Afcommerce Shopping Cart