Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2006-6209

EPSS 0.87% · P75
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-6209

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_show.asp, or the (2) maingroup or (3) secondgroup parameter to (b) item_list.asp. NOTE: the code_no parameter to Item_Show.asp is covered by CVE-2005-2601.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MidiCart ASP Item_Show.ASP ID2006quant参数SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MidiCart ASP Shopping Cart和ASP Plus Shopping Cart存在多个SQL注入漏洞，远程攻击者可以通过传给(a)item_show.asp的(1)id2006quant参数，或者传给(b)item_list.asp的(2)maingroup或(3)secondgroup参数，来执行任意SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-6209

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-6209

请登录查看更多情报信息。

Same Patch Batch · n/a · 2006-12-01 · 41 CVEs total

CVE-2006-6187ClickTech Click Gallery 多个SQL注入漏洞
CVE-2006-6219Dev4U CMS Index.PHP 多个跨站脚本漏洞
CVE-2006-6220Recipes Website 多个SQL注入漏洞
CVE-2006-6180Expinion.net iNews Publisher Articles.ASP 跨站脚本攻击漏洞
CVE-2006-6181ClickContact Default.ASP多个SQL注入漏洞
CVE-2006-6182GNotebook本地信息泄露漏洞
CVE-2006-61833Com TFTP超长传输模式字段远程缓冲区溢出漏洞
CVE-2006-6184AT-TFTP Server超长文件名远程缓冲区溢出漏洞
CVE-2006-6185Wabbit PHP Gallery Dir参数目录遍历漏洞
CVE-2006-6186enomphp 多个目录遍历漏洞
CVE-2006-6218dev4u CMS中的index.php 多个SQL注入漏洞
CVE-2006-6188ClickTech Click Gallery view_search.asp 跨站点脚本漏洞
CVE-2006-6189Clickblog Displaycalendar.ASP SQL注入漏洞
CVE-2006-6190Anna IRC Bot Anna.PL SQL注入漏洞
CVE-2006-61918pixel.net simpleblog admin/edit.asp SQL注入漏洞
CVE-2006-61928pixel.net SimpleBlog 权限认证和访问控制漏洞
CVE-2006-6193BasicForum EDIT.ASP SQL注入漏洞
CVE-2006-6194Ultimate Survey Pro index.asp 多个SQL注入漏洞
CVE-2006-6195Fixit iDMS Pro Image Gallery 多个SQL注入漏洞
CVE-2006-6196Fixit iDMS Pro Image Gallery 跨站脚本攻击漏洞

Showing top 20 of 41 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-6209

No comments yet

Leave a comment