Vulnerabilities > CVE-2006-5247 - Cross-Site Scripting vulnerability in Eazy Cart

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
eazy-cart
NVD
Published: 2006-10-12
Updated: 2018-10-17

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.php, possibly related to the (1) des and (2) qty parameters in an add action, and via other unspecified vectors. NOTE: some details are obtained from third party information.

Vulnerable Configurations

Part Description Count
Application
Eazy_Cart
1

References