NVD

Id
61663  
Name
CVE-2006-2979  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter in forum.php, which is not properly handled in block_forum_topics.php, and (2) item_id parameter in reviews.php, which is not properly handled in block_reviews.php.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-12  
Modified Date
2011-03-07  
Seq
2006-2979  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319187 61663 CVE-2006-2979 1087  View
319188 61663 CVE-2006-2979 20060612 verify of ViArt Shop Free 2.5.5 issue (diff digging)  View
319189 61663 CVE-2006-2979 http://www.codetosell.com/downloads/xss_fix.zip  View
319190 61663 CVE-2006-2979 20060607 [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability  View
319191 61663 CVE-2006-2979 18369  View
319192 61663 CVE-2006-2979 ADV-2006-2253  View
319193 61663 CVE-2006-2979 viartshop-multiple-scripts-xss(27112)  View

Related JVN