CVE-2006-2053

CVE-2006-2053 describes multiple SQL injection vulnerabilities affecting QuickEStore versions 7.9 and earlier. Attackers can exploit these flaws by manipulating parameters like OrderID, ItemID, SubCatID, CategoryID, and ProdID across various CFM files, potentially executing arbitrary SQL commands. With a CVSS score of 6.4, this vulnerability is network-exploitable with low attack complexity, allowing for partial confidentiality and integrity compromise without authentication. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.