CVE-2006-3030

MEDIO 4.3CVE-2006-3030 · Published 15/06/2006 · updated 16/06/2026

In breve

CVE-2006-3030 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda dwzone shopping cart (dwzone).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dwzone shopping cart dwzone	`≤ 1.1.9`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ToCategory and (2) FromCategory parameters to (a) ProductDetailsForm.asp and (3) UserName and (4) Password parameters to (b) LogIn/VerifyUserLog.asp.

References

pridels0.blogspot.com/2006/06/dwzone-shopping-cart-xss-vuln.html
secunia.com/advisories/20603 · Vendor Advisory
osvdb.org/26401
osvdb.org/26402
vupen.com/english/advisories/2006/2291
exchange.xforce.ibmcloud.com/vulnerabilities/27032

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free