Unscored severity · published Oct 31, 2006
CVE-2006-5631
Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-5632.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
IG Shop · IG Shop
1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5631
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5631
secunia.com
http://secunia.com/advisories/22701
Exploit
http://securitytracker.com/id?1017130
Exploit
http://www.attrition.org/pipermail/vim/2006-October/001099.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29890
More from IG Shop
6.1
CVE-2006-5632
Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different…