Vulnerabilities > Infinicart

DATE CVE VULNERABILITY TITLE RISK
2006-11-17 CVE-2006-5958 Cross-Site Scripting vulnerability in infinicart
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) search.asp, and (4) email field in (c) sendpassword.asp.
network
infinicart
6.8