NVD

Id
58985  
Name
CVE-2006-0245  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) catId parameters in index.php; and the (8) username field in a login action in index.php. NOTE: the cart.php/redir and index.php/searchStr vectors are already covered by CVE-2005-3152.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-17  
Modified Date
2011-03-07  
Seq
2006-0245  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302935 58985 CVE-2006-0245 http://bugs.cubecart.com/?do=details&id=459  View
302936 58985 CVE-2006-0245 http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html  View
302937 58985 CVE-2006-0245 16259  View
302938 58985 CVE-2006-0245 ADV-2006-0227  View
302939 58985 CVE-2006-0245 cubecart-index-script-xss(24177)  View

Related JVN