medium6.8
CVE-2006-6868
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML vi…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zen Cart | Web Shopping Cart | Versions 1.1.2d, 1.2.6d, 1.2.7, 1.3, 1.3.2, 1.3.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23482
- http://www.securityfocus.com/bid/21842
- http://www.vupen.com/english/advisories/2007/0022
- http://www.zen-cart.com/forum/showthread.php?t=54615
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31202
- http://secunia.com/advisories/23482
- http://www.securityfocus.com/bid/21842
- http://www.vupen.com/english/advisories/2007/0022
- http://www.zen-cart.com/forum/showthread.php?t=54615
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31202