CVE

Id
21268  
CVE No.
CVE-2006-5164  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.  
Phase
Assigned (20061003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202251 21268 CVE-2006-5164 BUGTRAQ:20061001 digishop v 4.0.0 Xss Vuln.  View
202252 21268 CVE-2006-5164 URL:http://www.securityfocus.com/archive/1/archive/1/447506/100/0/threaded  View
202253 21268 CVE-2006-5164 BID:20297  View
202254 21268 CVE-2006-5164 URL:http://www.securityfocus.com/bid/20297  View
202255 21268 CVE-2006-5164 VUPEN:ADV-2006-3889  View
202256 21268 CVE-2006-5164 URL:http://www.vupen.com/english/advisories/2006/3889  View
202257 21268 CVE-2006-5164 SECUNIA:22086  View
202258 21268 CVE-2006-5164 URL:http://secunia.com/advisories/22086  View
202259 21268 CVE-2006-5164 SREASON:1687  View
202260 21268 CVE-2006-5164 URL:http://securityreason.com/securityalert/1687  View
202261 21268 CVE-2006-5164 XF:digishop-cart-xss(29309)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59956 JVNDB-2006-002222 PHP Web Scripts Easy Banner Free の functions.php における PHP リモートファイルインクルージョンの脆弱性 PHP Web Scripts Easy Banner Free の functions.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5166 21268 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002222.html  View