CVE-2006-1706

no score yetEPSS 2.3%

Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2006-04-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kansok_communications:shopweezle

References

http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html
http://secunia.com/advisories/19593
http://www.osvdb.org/24470
http://www.osvdb.org/24471
http://www.osvdb.org/24472

Check your stack JSON