VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 14, 2006· Updated Jun 16, 2026

CVE-2006-6534

CVE-2006-6534

Description

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web script or HTML via the (1) set parameter to admin/modules.php, the (2) selected_box parameter to definitiva/admin/customers.php, the (3) lID parameter to admin/languages_definitions.php, or the (4) pID parameter to admin/products.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • OsCommerce/Oscommerce2 versions
    cpe:2.3:a:oscommerce:oscommerce:3.0a3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oscommerce:oscommerce:3.0a3:*:*:*:*:*:*:*
    • (no CPE)range: =3.0a3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.