QwikSec

Security Database

CVE

CWE

Training

CVE-2006-5119

Published: Oct 2, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php, or the (3) admin_email parameter in (b) admin/password_forgotten.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

zencart-multiple-xss(29248)

vdb-entry

x_refsource_XF

http://www.zen-cart.com/forum/showthread.php?p=270823#post270823

x_refsource_CONFIRM

20060928 Multiple XSS Vulnerabilities in Zen Cart 1.3.5

mailing-list

x_refsource_BUGTRAQ

http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0003

x_refsource_MISC

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SREASON

third-party-advisory

x_refsource_SECUNIA

http://www.zen-cart.com/forum/showthread.php?t=47526

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.