Unrated severityNVD Advisory· Published Nov 16, 2006· Updated Jun 16, 2026
CVE-2006-5935
CVE-2006-5935
Description
SQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sessid parameter.
Affected products
2cpe:2.3:a:shopsystems:shopsystems:4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:shopsystems:shopsystems:4.0:*:*:*:*:*:*:*
- (no CPE)range: <=4.0
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/22867nvdVendor Advisory
- www.majorsecurity.de/index_2.phpnvdVendor Advisory
- www.securityfocus.com/archive/1/451315nvdVendor Advisory
- www.securityfocus.com/bid/21005nvdVendor Advisory
- securityreason.com/securityalert/1871nvd
- www.vupen.com/english/advisories/2006/4511nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/30219nvd
News mentions
0No linked articles in our index yet.