Obie Website » Mini Web Shop : Security Vulnerabilities, CVEs, (XSS) CVSS score >= 3
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) to (1) sendmail.php or (2) order_form.php, different vectors than CVE-2006-6734.
Max CVSS
4.3
EPSS Score
0.80%
Published
2007-05-09
Updated
2018-10-16
Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote attackers to inject arbitrary web script or HTML via the catname parameter.
Max CVSS
4.3
EPSS Score
0.60%
Published
2006-12-26
Updated
2018-10-17
2 vulnerabilities found