Unscored CVE-2006-3001 EUVD-2006-2998GHSA-rfwg-h6rw-jwv3

Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTM…

Published Jun 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: this might be resultant from another vulnerability, since the XSS is reflected in an error message.

References

20621 third-party-advisory
20060608 okscripts.com - XSS Vulns mailing-list
okmall-search-xss(27131) vdb-entry
ADV-2006-2282 vdb-entry
1080 third-party-advisory