CVE-2006-0245

🗓️ 18 Jan 2006 02:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

CubeCart 3.0.7-pl1 XSS vulnerabilitie

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2006-0245	18 Jan 200602:00	–	cvelist
EUVD	EUVD-2006-0253	7 Oct 202500:30	–	euvd
NVD	CVE-2006-0245	18 Jan 200601:51	–	nvd
Prion	Cross site scripting	18 Jan 200601:51	–	prion

NVD

Node

devellion cubecartMatch3.0.7-pl1

Source	Link
lostmon	www.lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/24177
secunia	www.secunia.com/advisories/18519
osvdb	www.osvdb.org/22471
securityfocus	www.securityfocus.com/bid/16259
vupen	www.vupen.com/english/advisories/2006/0227
bugs	www.bugs.cubecart.com/

Parameter	Position	Path	Description	CWE
redir	query param	index.php	Cross-site scripting via multiple parameters in index.php (redir, productId, docId, act, catId) leading to script/HTML injection.	CWE-79
productId	query param	index.php	Cross-site scripting via multiple parameters in index.php (redir, productId, docId, act, catId) leading to script/HTML injection.	CWE-79
docId	query param	index.php	Cross-site scripting via multiple parameters in index.php (redir, productId, docId, act, catId) leading to script/HTML injection.	CWE-79
act	query param	index.php	Cross-site scripting via multiple parameters in index.php (redir, productId, docId, act, catId) leading to script/HTML injection.	CWE-79
catId	query param	index.php	Cross-site scripting via multiple parameters in index.php (redir, productId, docId, act, catId) leading to script/HTML injection.	CWE-79
username	request body	index.php	XSS via username field in login action in index.php.	CWE-79

16 Jun 2026 22:20Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

EPSS0.01427

cve-2006-0245 cross-site scripting xss cubecart web security remote attack