CVE Database
/

CVE-2006-5164

Back to search

CVE-2006-5164

Published: Oct 4, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.

VendorProductVersions

n/a

n/a

affected
n/a

References

1687
third-party-advisory
x_refsource_SREASON
digishop-cart-xss(29309)
vdb-entry
x_refsource_XF
ADV-2006-3889
vdb-entry
x_refsource_VUPEN
20061001 digishop v 4.0.0 Xss Vuln.
mailing-list
x_refsource_BUGTRAQ
20297
vdb-entry
x_refsource_BID
22086
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now