Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Apr 23, 2026

CVE-2006-6911

Description

SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users to execute arbitrary SQL commands via the ordernum parameter.

Affected products

Digitizing Quote And Ordering System/Digitizing Quote And Ordering System
cpe:2.3:a:digitizing_quote_and_ordering_system:digitizing_quote_and_ordering_system:1.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/23652nvdVendor Advisory
osvdb.org/31689nvd
exchange.xforce.ibmcloud.com/vulnerabilities/31318nvd
www.exploit-db.com/exploits/3089nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000