Unscored severity · published Apr 26, 2006
CVE-2006-2051
Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nextage Shopping Cart · Nextage
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2051
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2051
securityreason.com
http://securityreason.com/securityalert/791
Exploit
http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/431983/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17685
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/26065
More from Nextage Shopping Cart
–
CVE-2006-4967
Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category…