CVEvulnerability
CVE-2006-2669
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php.
Affected configurations
• preprojects.com pre shopping mall 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/20295 Patch, Vendor Advisory
- http://securityreason.com/securityalert/990 securityreason.com
- http://www.osvdb.org/26080 www.osvdb.org
- http://www.osvdb.org/26081 www.osvdb.org
- http://www.osvdb.org/26082 www.osvdb.org
- http://www.securityfocus.com/archive/1/435018/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18706 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1991 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26690 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20295 Patch, Vendor Advisory
- http://securityreason.com/securityalert/990 securityreason.com
- http://www.osvdb.org/26080 www.osvdb.org
- http://www.osvdb.org/26081 www.osvdb.org
- http://www.osvdb.org/26082 www.osvdb.org
- http://www.securityfocus.com/archive/1/435018/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18706 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1991 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26690 exchange.xforce.ibmcloud.com