Unscored severity · published Dec 31, 2006
CVE-2006-6868
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Web Shopping Cart · Zen Cart
1.1.2d; 1.2.6d; 1.2.7; 1.3; 1.3.2; 1.3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6868
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6868
Vendor Advisory
http://secunia.com/advisories/23482
www.securityfocus.com
http://www.securityfocus.com/bid/21842
www.vupen.com
http://www.vupen.com/english/advisories/2007/0022
www.zen-cart.com
http://www.zen-cart.com/forum/showthread.php?t=54615
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31202