Unrated severityNVD Advisory· Published Nov 21, 2006· Updated Jun 16, 2026

CVE-2006-6034

Description

Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute arbitrary SQL commands via the (1) keyword or (2) cid parameter in (a) catalogue.asp, or the (3) pid parameter in (b) viewDetail.asp.

Affected products

Sitesoutlet/E Commerce Kit 1
cpe:2.3:a:sitesoutlet:e-commerce_kit-1:paypal_edition:*:*:*:*:*:*:*
Sitesoutlet/E-commerce Kit-1 PayPal Editionllm-create

Patches

Vulnerability mechanics

References

secunia.com/advisories/22975nvdVendor Advisory
securityreason.com/securityalert/1900nvd
www.securityfocus.com/archive/1/451771/100/0/threadednvd
www.securityfocus.com/bid/21056nvd
www.vupen.com/english/advisories/2006/4571nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000