Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Feb 15, 2006· Updated Apr 16, 2026

CVE-2006-0696

CVE-2006-0696

Description

SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

14

Zen Cart/Zen Cart14 versions
cpe:2.3:a:zen_cart:zen_cart:1.1.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:zen_cart:zen_cart:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.1d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.2d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.3d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.4d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.0d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.1d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.2d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.3d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.4d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.6d:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

secunia.com/advisories/18801nvdPatchVendor Advisory
sourceforge.net/project/shownotes.phpnvdPatch
www.osvdb.org/23110nvd
www.vupen.com/english/advisories/2006/0546nvd
exchange.xforce.ibmcloud.com/vulnerabilities/24701nvd

News mentions

0

No linked articles in our index yet.