CVE-2006-6153

Multiple cross-site scripting XSS vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via 1 catname parameter to cat.asp or the 2 minprice parameter to search.asp...

CVE-2006-6153

CVE-2006-6153 affects the vSpin.net Classified System 2004. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) catname in cat.asp and (2) minprice in search.asp. The underlyin...