CVE-2006-3030

no score yetEPSS 1.3%

Multiple cross-site scripting (XSS) vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ToCategory and (2) FromCategory parameters to (a) ProductDetailsForm.asp and (3) UserName and (4) Password parameters to (b) LogIn/VerifyUserLog.asp.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2006-06-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dwzone:dwzone_shopping_cart

References

http://pridels0.blogspot.com/2006/06/dwzone-shopping-cart-xss-vuln.html
http://secunia.com/advisories/20603
http://www.osvdb.org/26401
http://www.osvdb.org/26402
http://www.vupen.com/english/advisories/2006/2291

Check your stack JSON