CVEvulnerability
CVE-2006-2979
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter in forum.php, which is not properly handled in block_forum_topics.php, and (2) item_id parameter in reviews.php, which is not properly handled in block_reviews.php.
Affected configurations
• viart shop 2.5.5 free
References
- http://secunia.com/advisories/20538 Vendor Advisory
- http://securityreason.com/securityalert/1087 securityreason.com
- http://www.attrition.org/pipermail/vim/2006-June/000846.html www.attrition.org
- http://www.codetosell.com/downloads/xss_fix.zip Patch, URL Repurposed
- http://www.securityfocus.com/archive/1/436415/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18369 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2253 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27112 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20538 Vendor Advisory
- http://securityreason.com/securityalert/1087 securityreason.com
- http://www.attrition.org/pipermail/vim/2006-June/000846.html www.attrition.org
- http://www.codetosell.com/downloads/xss_fix.zip Patch, URL Repurposed
- http://www.securityfocus.com/archive/1/436415/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18369 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2253 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27112 exchange.xforce.ibmcloud.com