medium4.3Public exploit code
CVE-2006-6153
Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vSpin Classified System 2004 - 'search.asp?minprice' Cross-Site Scripting2006-11-20 · webapps · asp · Verified
- vSpin Classified System 2004 - 'cat.asp?catname' Cross-Site Scripting2006-11-20 · webapps · asp · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vspin.Net | Classified System | Version 2004 |
References
- NVD record
- CVE.org record
- http://s-a-p.ca/index.php?page=OurAdvisories&id=47
- http://secunia.com/advisories/22987
- http://securityreason.com/securityalert/1926
- http://securitytracker.com/id?1017259
- http://www.securityfocus.com/archive/1/452179/100/100/threaded
- http://www.securityfocus.com/bid/21190
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30446
- http://s-a-p.ca/index.php?page=OurAdvisories&id=47
- http://secunia.com/advisories/22987
- http://securityreason.com/securityalert/1926
- http://securitytracker.com/id?1017259
- http://www.securityfocus.com/archive/1/452179/100/100/threaded
- http://www.securityfocus.com/bid/21190
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30446