CVE-2006-0245

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4)…

published January 18, 2006

CVSS
—
EPSS
1%
Percentile
72.8
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) catId parameters in index.php; and the (8) username field in a login action in index.php. NOTE: the cart.php/redir and index.php/searchStr vectors are already covered by CVE-2005-3152.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01427 · 72.8th percentile
Published
2006-01-18T02:00Z
EPSS history
Timeline
  • 18 JAN 02:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4)…
    cvelistv5