CVE-2006-6911

MEDIUM CVSS: 6.0 Published: 2006-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users to execute arbitrary SQL commands via the ordernum parameter.

Affected Platforms

Digitizing Quote And Ordering System Digitizing Quote And Ordering System

Weakness Type

NVD-CWE-Other

References

http://osvdb.org/31689
http://secunia.com/advisories/23652
https://exchange.xforce.ibmcloud.com/vulnerabilities/31318
https://www.exploit-db.com/exploits/3089
http://osvdb.org/31689
http://secunia.com/advisories/23652