CVE-2006-3800 - Cross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the "new review" text box

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the "new review" text box

Published Jul 21, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.35%

Description

Cross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the "new review" text box.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://securityreason.com/securityalert/1255
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016538
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/440589/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440848/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19074
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3794
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27847
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/1255		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016538		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/440589/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440848/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19074		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3794		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27847		vdb-entryx_refsource_XF