Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/09/2006 Updated: 05/09/2008

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and previous versions, when register_globals is enabled, allows remote malicious users to inject arbitrary web script or HTML via the links array.

Vulnerable Product	Search on Vulmon	Subscribe to Product
devellion cubecart

CubeCart Multiple Vulnerabilities Vendor: Devellion Limited Product: CubeCart Version: <= 3012 Website: wwwcubecartcom BID: 19782 CVE: CVE-2006-4525 OSVDB: 28279 28280 28281 SECUNIA: 21659 Description: CubeCart is a very popular web application written in php that allows for an individual to open up a fully functioning online e ...

NVD-CWE-Other http://www.gulftech.org/?node=research&article_id=00111-08282006&http://cubecart.com/site/forums/index.php?showtopic=21540 http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697 http://www.securityfocus.com/bid/19782 http://secunia.com/advisories/21659 https://nvd.nist.gov https://www.exploit-db.com/exploits/43840/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-4525

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect