CVE-2006-4967

CVE-2006-4967

EPSS 1.6%

Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/22030 http://securityreason.com/securityalert/1625 http://securitytracker.com/id?1016888 http://www.securityfocus.com/archive/1/446412/100/0/threaded http://www.securityfocus.com/bid/20040 http://www.vupen.com/english/advisories/2006/3709