CVE-2006-6074
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to...
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier.
- Record
CVE-2006-6074- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier.
- Record
CVE-2006-6074- Updated
- 2026-11-02
EUVDEUVD-2006-6057 No score
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier.
- Record
EUVD-2006-6057- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jp3f-68wg-j479 No score
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to...
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier.
- Record
GHSA-jp3f-68wg-j479- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6074 is a high vulnerability (CVSS 7.5) in Enthrallweb Eshopping Cart, published November 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.40%, the 72nd percentile. No source names a fixed version.
References
securityreason.com/securityalert/1906
securityfocus.com/archive/1/451840/100/0/threaded
secunia.com/advisories/22955
vupen.com/english/advisories/2006/4578
s-a-p.ca/index.php?page=OurAdvisories&id=21
nvd.nist.gov/vuln/detail/CVE-2006-6074
github.com/advisories/GHSA-jp3f-68wg-j479