← All advisories

Unrated severityNVD Advisory· Published Feb 15, 2006· Updated Jun 16, 2026

CVE-2006-0696

CVE-2006-0696

Description

SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

15

Zen Cart/ZenCart15 versions
cpe:2.3:a:zen_cart:zen_cart:1.1.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:zen_cart:zen_cart:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.1d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.2d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.3d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.1.4d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.0d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.1d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.1_patch1:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.2d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.3d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.4d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.5d:*:*:*:*:*:*:*
- cpe:2.3:a:zen_cart:zen_cart:1.2.6d:*:*:*:*:*:*:*
- (no CPE)range: <1.2.7

Patches

Vulnerability mechanics

References

5

secunia.com/advisories/18801nvdPatchVendor Advisory
sourceforge.net/project/shownotes.phpnvdPatch
www.osvdb.org/23110nvd
www.vupen.com/english/advisories/2006/0546nvd
exchange.xforce.ibmcloud.com/vulnerabilities/24701nvd

News mentions

0

No linked articles in our index yet.