CVE-2006-3187

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.07%

Published

Jun 23, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp, and the (3) maingroup parameter to (b) meny2.asp. NOTE: it is possible that this is resultant from SQL injection or a forced SQL error.

Affected Products (1)

sharky_e-shop · sharky_e-shopvulnerable

References (10)

http://pridels0.blogspot.com/2006/06/sharky-e-shop-xss.html

http://www.securityfocus.com/bid/18530

http://www.securityfocus.com/bid/18532

http://www.vupen.com/english/advisories/2006/2426

https://exchange.xforce.ibmcloud.com/vulnerabilities/27207

http://pridels0.blogspot.com/2006/06/sharky-e-shop-xss.html

http://www.securityfocus.com/bid/18530

http://www.securityfocus.com/bid/18532

http://www.vupen.com/english/advisories/2006/2426

https://exchange.xforce.ibmcloud.com/vulnerabilities/27207

KEV Catalog EPSS Scores Vendors All CVEs