CVE-2006-6589
Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 allows remote attackers to inject arbitrary web script or HTML via the SEARCH_STRING parameter, a different issue than CVE-2006-6587. NOTE: some of these details are obtained from third party information.
References (4)
Core 4
Core References
Various Sources x_refsource_misc
http://jira.undersunconsulting.com/browse/OFBIZ-559
Exploit, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23457
Exploit x_refsource_confirm
https://issues.apache.org/jira/browse/OFBIZ-260
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/21702
Scores
EPSS
0.0280
EPSS Percentile
84.9%
Details
Status
published
Products (2)
apache/ofbiz
apache/opentaps
0.9.3
Published
Dec 15, 2006
Tracked Since
Feb 18, 2026