Vulnerabilities > CVE-2006-6534 - Unspecified vulnerability in Oscommerce 3.0A3

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
oscommerce
NVD
Published: 2006-12-14
Updated: 2024-11-21

Summary

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_box parameter to definitiva/admin/customers.php, the (3) lID parameter to admin/languages_definitions.php, or the (4) pID parameter to admin/products.php.

Vulnerable Configurations

Part Description Count
Application
Oscommerce
1

References