CVE-2006-6153

Published: Nov 28, 2006Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.

Affected (1)

Products: Vspin.net: Classified System

Vspin.net

1 product

Classified System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vspin.net Classified System	Version 2004

References (14)

http://s-a-p.ca/index.php?page=OurAdvisories&id=47

Source: cve@mitre.org

URL Repurposed

http://secunia.com/advisories/22987

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1926

Source: cve@mitre.org

http://securitytracker.com/id?1017259

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/452179/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21190

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/30446

Source: cve@mitre.org

http://s-a-p.ca/index.php?page=OurAdvisories&id=47