Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2006-5119

Published: 03/10/2006 Updated: 17/10/2018
CVSS v2 Base Score: 4 | Impact Score: 4.9 | Exploitability Score: 4.9
VMScore: 356
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php, or the (3) admin_email parameter in (b) admin/password_forgotten.php.

Vulnerable Product Search on Vulmon Subscribe to Product

zen cart zen cart 1.3.5

References

CWE-79http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0003http://www.securityfocus.com/bid/20242http://www.zen-cart.com/forum/showthread.php?p=270823#post270823http://www.zen-cart.com/forum/showthread.php?t=47526http://secunia.com/advisories/22118http://securityreason.com/securityalert/1667http://www.vupen.com/english/advisories/2006/3849https://exchange.xforce.ibmcloud.com/vulnerabilities/29248http://www.securityfocus.com/archive/1/447286/100/0/threadedhttps://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073CVE-2024-5496CVE-2024-5495XPath injectionbypassCVE-2024-30043CVE-2024-24919denial of serviceCVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook