Unscored severity · published Oct 5, 2006
CVE-2006-5164
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Digishop · Sum Effect Software
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5164
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5164
Vendor Advisory
http://secunia.com/advisories/22086
securityreason.com
http://securityreason.com/securityalert/1687
www.securityfocus.com
http://www.securityfocus.com/archive/1/447506/100/0/threaded
Exploit
http://www.securityfocus.com/bid/20297
www.vupen.com
http://www.vupen.com/english/advisories/2006/3889
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29309
More from Digishop
–
CVE-2005-4614
Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c…