CVE-2006-0245

MEDIUM 4.3CVE-2006-0245 · Published 18/01/2006 · updated 16/06/2026

In short

CVE-2006-0245 is a MEDIUM (CVSS 4.3) vulnerability affecting cubecart (devellion).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cubecart devellion	`= 3.0.7-pl1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) catId parameters in index.php; and the (8) username field in a login action in index.php. NOTE: the cart.php/redir and index.php/searchStr vectors are already covered by CVE-2005-3152.

References

bugs.cubecart.com · Exploit
lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html · Exploit
secunia.com/advisories/18519 · Exploit
osvdb.org/22471
securityfocus.com/bid/16259 · Exploit
vupen.com/english/advisories/2006/0227
exchange.xforce.ibmcloud.com/vulnerabilities/24177

More vulnerabilities in cubecart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cubecart

devellion

= 3.0.7-pl1

No fix yet

Description

More vulnerabilities in cubecart

See all →