NVD

Id
62907  
Name
CVE-2006-4268  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file, (2) x, and (3) y parameters in (a) admin/filemanager/preview.php; and the (4) email parameter in (b) admin/login.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-21  
Modified Date
2011-03-07  
Seq
2006-4268  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327126 62907 CVE-2006-4268 http://bugs.cubecart.com/?do=details&id=523  View
327127 62907 CVE-2006-4268 http://retrogod.altervista.org/cubecart_3011_adv.html  View
327128 62907 CVE-2006-4268 1429  View
327129 62907 CVE-2006-4268 1016708  View
327130 62907 CVE-2006-4268 http://www.cubecart.com/site/forums/index.php?showtopic=21247  View
327131 62907 CVE-2006-4268 20060817 CubeCart <= 3.0.11 SQL injection & cross site scripting  View
327132 62907 CVE-2006-4268 19563  View
327133 62907 CVE-2006-4268 ADV-2006-3314  View
327134 62907 CVE-2006-4268 cubecart-login-xss(28429)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58843 JVNDB-2006-001109 CubeCart におけるクロスサイトスクリプティングの脆弱性 CubeCart には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4268 20370 CVE-2006-4268 62907 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001109.html 2006-08-17 2012-06-26 View