CVE-2006-2038: Amplecom Ampleshop

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) RecordID parameter in (a) Customeraddresses_RecordAction.cfm and (b) youraccount.cfm; (2) solus parameter in (c) detail.cfm; and (3) cat parameter in (d) category.cfm.

Affected products

• Amplecom Ampleshop: up to and including 2.1

Published 2006-04-26. Last modified 2026-06-16.