Vulnerabilities

TI-2006-05437 CVE-2006-5632 · GHSA-3xr4-xhxj-vcwg

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote…

LOW 30

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0128 Published 2006-10-31 No fix listed CWE-79

TI-2006-05436 CVE-2006-5631 · GHSA-h5xg-v287-cqh4

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01412 Published 2006-10-31 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote…

Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote…