CVE-2006-5957
infinicart - SQL Injection via groupid, productid, catid, or subid Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-5957. PoCs published by laurent gaffie.
AI-analyzed exploit summary The provided text describes SQL injection and HTML injection vulnerabilities in Infinicart's demonstration version. It outlines potential impacts but does not include functional exploit code.
Description
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1) groupid parameter in (a) browse_group.asp, (2) productid parameter in (b) added_to_cart.asp, and (3) catid and (4) subid parameter in (c) browsesubcat.asp. NOTE: the vendor has disputed this report, saying "The vulnerabilities mentioned were never present in our official released products but only in the unofficial demo version. However we do appreciate the information. We have update our demo version and made sure all those vulnerabilities are fixed.
Exploits (3)
The provided text describes SQL injection and HTML injection vulnerabilities in Infinicart's demonstration version. It outlines potential impacts but does not include functional exploit code.
The provided text describes SQL injection vulnerabilities in Infinicart's demonstration version, specifically in the 'browsesubcat.asp' page via the 'catid' and 'subid' parameters. It lacks actual exploit code but details the vulnerability and affected endpoints.
The provided text describes SQL injection and HTML injection vulnerabilities in Infinicart's demonstration version. It outlines potential impacts but does not include executable exploit code.