CVEvulnerability
CVE-2006-2649
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php.
Affected configurations
• cosmicphp cosmicshoppingcart
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html archives.neohapsis.com
- http://secunia.com/advisories/20272 Exploit, Vendor Advisory
- http://securitytracker.com/id?1016164 securitytracker.com
- http://www.osvdb.org/26090 www.osvdb.org
- http://www.osvdb.org/26091 www.osvdb.org
- http://www.osvdb.org/26092 www.osvdb.org
- http://www.osvdb.org/26093 www.osvdb.org
- http://www.securityfocus.com/bid/18709 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1984 Vendor Advisory
- http://www.zone-h.org/advisories/read/id=9058 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26681 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html archives.neohapsis.com
- http://secunia.com/advisories/20272 Exploit, Vendor Advisory
- http://securitytracker.com/id?1016164 securitytracker.com
- http://www.osvdb.org/26090 www.osvdb.org
- http://www.osvdb.org/26091 www.osvdb.org
- http://www.osvdb.org/26092 www.osvdb.org
- http://www.osvdb.org/26093 www.osvdb.org
- http://www.securityfocus.com/bid/18709 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1984 Vendor Advisory
- http://www.zone-h.org/advisories/read/id=9058 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26681 exchange.xforce.ibmcloud.com