CVE-2006-5164

Published: Oct 5, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) sortBy or (2) search parameters.

Affected (1)

Products: Sum Effect Software: Digishop

Sum Effect Software

1 product

Digishop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sum Effect Software Digishop	Version 4.0

References (12)

http://secunia.com/advisories/22086

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1687

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447506/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20297

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/3889

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29309

Source: cve@mitre.org

http://secunia.com/advisories/22086