Unscored CVE-2006-5960 EUVD-2006-5943GHSA-w36q-9rcw-7pmg

Multiple cross-site scripting (XSS) vulnerabilities in account_login.asp in A+ Store E-Commerce allow remote attackers to inject arbitrary …

Published Nov 17, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in account_login.asp in A+ Store E-Commerce allow remote attackers to inject arbitrary web script or HTML via the (1) username (txtUserName) and (2) password (txtPassword) parameters. NOTE: portions of these details are obtained from third party information.

References

21092 vdb-entry
A+store-accountlogin-xss(30284) vdb-entry
1880 third-party-advisory
22918 third-party-advisory
20061114 A+ Store E-Commerce[ injection sql & xss (post) ] mailing-list
30418 vdb-entry