Filtered by vendor Nextage Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-4967 1 Nextage 1 Nextage Shopping Cart 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php.
CVE-2006-2051 1 Nextage 1 Nextage Shopping Cart 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters.