Vulnerabilities > CVE-2006-3613 - Cross-Site Scripting vulnerability in Chamberland Technology Ezwaiter Online 3.0
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE network
chamberland-technology
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka "Who is this item for?") and (2) special (aka "Special Instructions") parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |