CVE-2006-6207: Lynx Internet Solutions Evolve Merchant

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error

Affected products

• Lynx Internet Solutions Evolve Merchant: any version

Published 2006-12-01. Last modified 2026-06-16.