CVE-2006-5245
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a...
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.
Exploit likelihood
What each source reports
NVD Score used
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.
- Record
CVE-2006-5245- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.
- Record
CVE-2006-5245- Updated
- 2026-11-02
EUVDEUVD-2006-5230 No score
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.
- Record
EUVD-2006-5230- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-498q-chcg-9x6r No score
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a...
Eazy Cart allows remote attackers to bypass authentication and gain administrative access via a direct request for admin/home/index.php, and possibly other PHP scripts under admin/.
- Record
GHSA-498q-chcg-9x6r- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5245 is a high vulnerability (CVSS 7.5) in Eazy Cart Cart, published October 12, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. No source names a fixed version.
References
securityreason.com/securityalert/1717
exchange.xforce.ibmcloud.com/vulnerabilities/29419
securityfocus.com/archive/1/448094/100/0/threaded
mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
securitytracker.com/id?1017041
secunia.com/advisories/22286
nvd.nist.gov/vuln/detail/CVE-2006-5245
github.com/advisories/GHSA-498q-chcg-9x6r