CVE-2006-1098: Digital Builder Nz Ecommerce

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem

Affected products

• Digital Builder Nz Ecommerce: any version

Published 2006-03-09. Last modified 2026-06-16.