CVE-2006-3542
Title: Boxcar Media Shopping Cart Cross-Site Scripting (XSS)
XSS
Proof Of Concept
No public PoC currently indexed for CVE-2006-3542.
CWE Category
NVD-CWE-noinfo
Published Date
Jul 13, 2006
Modified Date
Jun 16, 2026
Exploit Status
Not Found
Score
5.8
CVSS v2.0
Exploit Probability (EPSS)
1.35%
Vulnerability Summary
CVE-2006-3542: Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) shop name field in (a) editshop.php, (b) edititem.php, and (c) index.php; and via the (2) item field in editshop.php and edititem.php.
Impacted Vendors
Reference Links
http://secunia.com/advisories/20957
http://securityreason.com/securityalert/1223
http://www.osvdb.org/27024
http://www.osvdb.org/27025
http://www.securityfocus.com/archive/1/439150/100/0/threaded
http://www.securityfocus.com/bid/18841
http://www.vupen.com/english/advisories/2006/2693
https://exchange.xforce.ibmcloud.com/vulnerabilities/27539
http://secunia.com/advisories/20957
http://securityreason.com/securityalert/1223
http://www.osvdb.org/27024
http://www.osvdb.org/27025
http://www.securityfocus.com/archive/1/439150/100/0/threaded
http://www.securityfocus.com/bid/18841
http://www.vupen.com/english/advisories/2006/2693
https://exchange.xforce.ibmcloud.com/vulnerabilities/27539
CVSS v2.0
Source Entity
[email protected]
Severity
MEDIUM
5.8
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:N/AC:M/Au:N/C:P/I:P/A:N
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2006-3542 Exploits & PoCs (Proof Of Concept)
No public PoCs found in our database for this CVE.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
N/A
Complexity
N/A
Privileges
N/A
Interaction
NONE
CVSS Vector String
AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Stack
No specific products linked.