Published: 17/11/2006 Updated: 17/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 695

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote malicious users to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) search.asp, and (4) email field in (c) sendpassword.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
infinicart infinicart

source: wwwsecurityfocuscom/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to compromise the application, acce ...

source: wwwsecurityfocuscom/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access ...

source: wwwsecurityfocuscom/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input A successful exploit of these vulnerabilities could allow an attacker to compromise the application, ac ...

NVD-CWE-Other http://www.securityfocus.com/bid/21043 http://secunia.com/advisories/22865 http://securityreason.com/securityalert/1881 http://www.vupen.com/english/advisories/2006/4501 https://exchange.xforce.ibmcloud.com/vulnerabilities/30233 http://www.securityfocus.com/archive/1/451322/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/28990/

CVE-2006-5958

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect