CVE-2006-5190
Published Oct 10, 2006
Last updated 7 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E93F87E-B207-4C02-8DE8-EEE7879EF68F",
"versionEndIncluding": "2.2_ms2_2006-08-17"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72557206-68C9-4EA4-B17A-873B8533DCE2"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D66A817F-919C-4BE2-A7C2-A97AD4DA528B"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D11B241D-C8A6-4315-B67E-5436CF232CED"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "345C3AC6-EBAC-4680-9223-4BC8D0BFA7E1"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E6B05B3-854E-4B64-B9AC-6A6660DFBB4F"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFB8C352-B248-4FA3-8F3B-E3557E47145F"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:2.2_cvs:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E94D34C1-A7BB-4F02-82E7-B708B33901E3"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:2.2_ms1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95097990-E687-4417-94DF-D6E9A7CC48AE"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C382022-5D4A-419E-9A6F-14A38094C187"
},
{
"criteria": "cpe:2.3:a:oscommerce:oscommerce:2.2_ms3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B69DBFBC-BC06-4090-9C9E-E0FF2953151F"
}
],
"operator": "OR"
}
]
}
]