← Database

CVE-2006-0111

MEDIUM CVSS: 5.0 Published: 2006-01-07 Modified: 2026-06-16

Description

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) parent or (2) pg parameter.

Affected Platforms

Boxcar Media Shopping Cart

Weakness Type

NVD-CWE-Other

References