Unrated severityNVD Advisory· Published May 4, 2006· Updated Apr 16, 2026
CVE-2006-2164
CVE-2006-2164
Description
Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php, and (2) prod_id parameter in (c) cart.php and (d) product_info.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.
Affected products
1- cpe:2.3:a:pentasoft_corp.:avactis_shopping_cart:*:*:*:*:*:*:*:*Range: <=0.1.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6News mentions
0No linked articles in our index yet.