4.3
CVSSv2

CVE-2006-5190

Published: 10/10/2006 Updated: 05/10/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 515
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote malicious users to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php.

Vulnerable Product Search on Vulmon Subscribe to Product

oscommerce oscommerce 2.2_cvs

oscommerce oscommerce 2.2_ms1

oscommerce oscommerce 1.13

oscommerce oscommerce 1.5.1

oscommerce oscommerce 2.1

oscommerce oscommerce 1.11

oscommerce oscommerce 1.12

oscommerce oscommerce

oscommerce oscommerce 1.1

oscommerce oscommerce 2.2_ms2

oscommerce oscommerce 2.2_ms3

Exploits

source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication credentials ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication cre ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication credent ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication credentials and ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication crede ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based au ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication credentia ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authen ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentica ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authenticati ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication credentials ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authenti ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based auth ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication c ...
source: wwwsecurityfocuscom/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site This may help the attacker steal cookie-based authentication credentials a ...