CVE-2006-6640

Published: Dec 19, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary web script or HTML via the (1) ss parameter in (a) search.asp and the (2) company and (3) username fields on (b) the web login page. NOTE: some details were obtained from third party information.

Affected (1)

Products: Omniture: Sitecatalyst

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Omniture Sitecatalyst	Version 0

References (14)

http://securityreason.com/securityalert/2048

Source: cve@mitre.org

http://securitytracker.com/id?1017392

Source: cve@mitre.org

http://www.hackerscenter.com/archive/view.asp?id=26714

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/454597/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/458130/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21620

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30916

Source: cve@mitre.org

http://securityreason.com/securityalert/2048

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017392

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.hackerscenter.com/archive/view.asp?id=26714

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/454597/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/458130/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21620

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30916

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.