Lucene search

PRIOn knowledge basePRION:CVE-2006-2165

HistoryMay 04, 2006 - 12:38 p.m.

Cross site scripting

2006-05-0412:38:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php and (2) prod_id parameter in © product_info.php. NOTE: this issue might be resultant from SQL injection.

CPENameOperatorVersion
avactis_shopping_cartle0.1.2

CPE	Name	Operator	Version
	avactis_shopping_cart	le	0.1.2

References

www.osvdb.org/25641

www.osvdb.org/25642

www.osvdb.org/25643

exchange.xforce.ibmcloud.com/vulnerabilities/26179

pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html

7.1 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for PRION:CVE-2006-2165

cve1