CVE-2006-3613

Published: Jul 18, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka "Who is this item for?") and (2) special (aka "Special Instructions") parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php.

Affected (1)

Products: Chamberland Technology: Ezwaiter Online

Chamberland Technology

1 product

Ezwaiter Online

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Chamberland Technology Ezwaiter Online	Version 3.0

References (6)

http://www.securityfocus.com/archive/1/438792/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18746

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27587

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438792/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18746

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27587

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.