Vulnerabilities > CVE-2006-5512 - Cross-Site Scripting vulnerability in Zwahlen's Online Shop Cat Parameter

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
zwahlen-informatik
exploit available

Summary

Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

Vulnerable Configurations

Part Description Count
Application
Zwahlen_Informatik
1

Exploit-Db

  • descriptionZwahlen's Online Shop 5.2.2 Cat Parameter Cross-Site Scripting Vulnerability. CVE-2006-5512. Webapps exploit for php platform
    idEDB-ID:28842
    last seen2016-02-03
    modified2006-10-23
    published2006-10-23
    reporterMC.Iglo
    sourcehttps://www.exploit-db.com/download/28842/
    titleZwahlen's Online Shop 5.2.2 Cat Parameter Cross-Site Scripting Vulnerability
  • descriptionINCA IM-204 Information Disclosure Vulnerability. CVE-2006-5512. Remote exploit for hardware platform
    idEDB-ID:28848
    last seen2016-02-03
    modified2006-10-23
    published2006-10-23
    reporterCrackers_Child
    sourcehttps://www.exploit-db.com/download/28848/
    titleINCA IM-204 Information Disclosure Vulnerability