CVE-2006-3001 - Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter

Published Jun 13, 2006

5.8

MEDIUM

CVSS 2.0

EPSS 1.98%

Description

Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: this might be resultant from another vulnerability, since the XSS is reflected in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/20621
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1080
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/436561
mailing-listx_refsource_BUGTRAQExploit
http://www.vupen.com/english/advisories/2006/2282
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2998
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27131
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20621		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1080		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/436561		mailing-listx_refsource_BUGTRAQExploit
http://www.vupen.com/english/advisories/2006/2282		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2998		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27131		vdb-entryx_refsource_XF