CVE-2006-5247

Опубликовано: 12 окт. 2006

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.php, possibly related to the (1) des and (2) qty parameters in an add action, and via other unspecified vectors. NOTE: some details are obtained from third party information.

Ссылки

http://secunia.com/advisories/22286
Exploit
Vendor Advisory
http://securityreason.com/securityalert/1717
http://securitytracker.com/id?1017041
http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt
Vendor Advisory
http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
Vendor Advisory
http://www.securityfocus.com/archive/1/448094/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/29421
http://secunia.com/advisories/22286
Exploit
Vendor Advisory
http://securityreason.com/securityalert/1717
http://securitytracker.com/id?1017041
http://www.mayhemiclabs.com/advisories/MHL-2006-01.txt
Vendor Advisory
http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001
Vendor Advisory
http://www.securityfocus.com/archive/1/448094/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/29421

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eazy_cart:eazy_cart:*:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.0192

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-m4x6-62w2-2c3x

github

почти 4 года назад