CVE-2006-3164

ALTO 7.5CVE-2006-3164 · Published 22/06/2006 · updated 16/06/2026

In breve

CVE-2006-3164 è una vulnerabilità ALTO (CVSS 7.5) che riguarda tplshop (tpl design).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 71.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
tplshop tpl_design	`≤ 2.0`	No fix yet

Description

SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the first_row parameter.

References

pridels0.blogspot.com/2006/06/tplshop-v-20-vuln.html
secunia.com/advisories/20738 · Vendor Advisory
osvdb.org/26631
securityfocus.com/bid/18524
vupen.com/english/advisories/2006/2418
exchange.xforce.ibmcloud.com/vulnerabilities/27200

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free