CVE-2005-0606

Description

Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20637

http://www.cubecart.com/site/forums/index.php?showtopic=6032

http://secunia.com/advisories/14416

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3