CVE-2006-5935

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessid parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/22867Vendor Advisory
http://securityreason.com/securityalert/1871
http://www.majorsecurity.de/index_2.php?major_rls=major_rls33Vendor Advisory
http://www.securityfocus.com/archive/1/451315Vendor Advisory
http://www.securityfocus.com/bid/21005Vendor Advisory
http://www.vupen.com/english/advisories/2006/4511
https://exchange.xforce.ibmcloud.com/vulnerabilities/30219
http://secunia.com/advisories/22867Vendor Advisory
http://securityreason.com/securityalert/1871
http://www.majorsecurity.de/index_2.php?major_rls=major_rls33Vendor Advisory
http://www.securityfocus.com/archive/1/451315Vendor Advisory
http://www.securityfocus.com/bid/21005Vendor Advisory
http://www.vupen.com/english/advisories/2006/4511
https://exchange.xforce.ibmcloud.com/vulnerabilities/30219

Timeline

Published: Nov 16, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-59367.5SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQL commands via the id CVE-2006-59377.5Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or CVE-2006-593810.0Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB fil CVE-2006-59397.8Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers a di CVE-2006-594010.0Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" CVE-2006-59426.8Cross-site scripting (XSS) vulnerability in inventory/display/display_results.asp in Website Designs For Less Inventory Manager allows remot CVE-2006-59437.5Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers CVE-2006-59446.8Cross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager (CSM) allows remote attackers to inject arbi CVE-2006-59457.5Multiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote attackers to execute arbitrary SQL commands via the CVE-2006-59467.5SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute arbitrary SQL commands CVE-2006-59475.0Multiple directory traversal vulnerabilities in Conxint FTP Server 2.2.0603, and possibly earlier, allow remote attackers to read arbitrary CVE-2006-59487.5PHP remote file inclusion vulnerability in pntUnit/Inspect.php in phpPeanuts 1.1 and earlier allows remote attackers to execute arbitrary PH