Lucene search
HistoryOct 05, 2006 - 4:04 a.m.
CVE-2006-5164
cve-2006-5164
cross-site scripting
xss
vulnerabilities
sum effect software
digishop 4.0
cart.php
sortby parameter
search parameter
6.3 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.065 Low
EPSS
Percentile
93.6%
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sum_effect_software:digishop | sum effect software digishop | eq | 4.0 |
6.3 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.065 Low
EPSS
Percentile
93.6%