CVE-2006-2827
CVE-2006-2827 is a critical-severity vulnerability in Qualiteam X-cart with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 3.x base score 9.8)
- CVSS v2: 6.4
- EPSS exploit prediction: 1% (68th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Qualiteam X-cart
- Published:
- Last modified:
Description
SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vendor disputed this issue in a comment on the original researcher's blog, saying "the bug does not impose any security threat and remote attackers can't add, modify, or delete information in the back-end database by sending specially-crafted SQL statements to the search.php script using various search parameters." As of 20060605, the original blog entry is unavailable, although ISS also reports the same dispute. CVE has not been able to investigate this issue further, although the researcher sometimes makes inaccurate claims
Frequently asked questions
- What is CVE-2006-2827?
- SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vendor disputed this issue in a comment on the original researcher's blog, saying "the bug does not impose any security threat and remote attackers can't add, modify, or delete information in the back-end database by sending specially-crafted SQL statements to the search.php script using various search parameters." As of 20060605, the original blog entry is unavailable, although ISS also reports the same dispute. CVE has not been able to investigate this issue further, although the researcher sometimes makes inaccurate claims
- How severe is CVE-2006-2827?
- CVE-2006-2827 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2006-2827 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-2827?
- CVE-2006-2827 primarily affects Qualiteam X-cart. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-2827?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2006-2827 published?
- CVE-2006-2827 was published on 2006-06-05 and last updated on 2026-06-16.
References
- http://pridels0.blogspot.com/2006/04/x-cart-sql-inj-vuln.html
- http://www.osvdb.org/25204
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25944
Affected products (3)
- cpe:2.3:a:qualiteam:x-cart:4.1.0_beta_1:*:*:*:*:*:*:*
- cpe:2.3:a:qualiteam:x-cart:gold_4.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:qualiteam:x-cart:pro_4.0.18:*:*:*:*:*:*:*
More vulnerabilities in Qualiteam X-cart
- CVE-2004-0241 — Critical (CVSS 10.0): X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or…
- CVE-2017-15285 — High (CVSS 8.8): X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because…
- CVE-2007-4907 — High (CVSS 7.5): Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a…
- CVE-2006-4904 — High (CVSS 7.5): Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to…
- CVE-2005-1822 — High (CVSS 7.5): Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL…
- CVE-2015-0951 — Medium (CVSS 6.5): X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a…