Vulnerabilities > CVE-2006-3029 - Cross-Site Scripting vulnerability in Clicktech Clickcart 6.0

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

clicktech

NVD

Published: 2006-06-15

Updated: 2017-07-20

Summary

Cross-site scripting (XSS) vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

Vulnerable Configurations

Part	Description	Count
Application	Clicktech Clicktech Clickcart 6.0	1

References

http://pridels0.blogspot.com/2006/06/clickcart-60-xss.html
http://secunia.com/advisories/20527
http://www.osvdb.org/26342
http://www.vupen.com/english/advisories/2006/2297
https://exchange.xforce.ibmcloud.com/vulnerabilities/27057