CVE-2006-2669

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26690

http://www.vupen.com/english/advisories/2006/1991

http://www.securityfocus.com/bid/18706

http://www.securityfocus.com/archive/1/435018/100/0/threaded

http://www.osvdb.org/26082

http://www.osvdb.org/26081

http://www.osvdb.org/26080

http://securityreason.com/securityalert/990

http://secunia.com/advisories/20295

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS