Vulnerabilities > CVE-2006-1685 - SQL Injection vulnerability in APT-webshop Modules.PHP

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
apt
exploit available
NVD
Published: 2006-04-11
Updated: 2017-07-20

Summary

Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the (1) group, (2) seite, and (3) id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows resultant path disclosure when the SQL queries are invalid.

Vulnerable Configurations

Part Description Count
Application
Apt
3

Exploit-Db

descriptionAPT-webshop 3.0/4.0 Modules.PHP Multiple SQL Injection Vulnerabilities. CVE-2006-1685. Webapps exploit for php platform
idEDB-ID:27590
last seen2016-02-03
modified2005-04-10
published2005-04-10
reporterr0t
sourcehttps://www.exploit-db.com/download/27590/
titleAPT-webshop 3.0/4.0 Modules.PHP Multiple SQL Injection Vulnerabilities

References