CVEvulnerability

CVE-2006-5631

6.8 MEDIUM Published 2006-10-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-10-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-5632.

Affected configurations

• ig shop ig shop 1.4

References