CVE-2006-1109

SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to...

7.5 HighPublic exploit

SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE.

Exploit likelihood

1.32%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2006-1109
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-1109
Updated: 2026-11-02

EUVDEUVD-2006-1113 No score

Record: EUVD-2006-1113
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8p92-52mw-x4g8 No score

SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to...

Record: GHSA-8p92-52mw-x4g8
Updated: 2026-11-02

Affected products

totalecommerce

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	TotalECommerce 1.0 - 'index.asp?id' SQL Injection	2006-03-04

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1109 is a high vulnerability (CVSS 7.5) in Totalecommerce, published March 9, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. No source names a fixed version.