CVE-2006-2051 - Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters

Published Apr 26, 2006

5.8

MEDIUM

CVSS 2.0

EPSS 1.79%

Description

Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://securityreason.com/securityalert/791
third-party-advisoryx_refsource_SREASON
http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt
x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/431983/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17685
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2052
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26065
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/791		third-party-advisoryx_refsource_SREASON
http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt		x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/431983/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17685		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2052		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26065		vdb-entryx_refsource_XF