Skip to content
OpenAdvisories
Unscored CVE-2006-6534 EUVD-2006-6517GHSA-527f-x3fp-xjq2

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via t…

Published Dec 14, 2006 · Updated Sep 17, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_box parameter to definitiva/admin/customers.php, the (3) lID parameter to admin/languages_definitions.php, or the (4) pID parameter to admin/products.php.

References