CVE-2006-3001

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-13 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: this might be resultant from another vulnerability, since the XSS is reflected in an error message.

Affected products

Okscripts Okmall: 1.0

References

http://secunia.com/advisories/20621
http://securityreason.com/securityalert/1080
http://www.securityfocus.com/archive/1/436561
http://www.vupen.com/english/advisories/2006/2282
https://exchange.xforce.ibmcloud.com/vulnerabilities/27131
http://secunia.com/advisories/20621
http://securityreason.com/securityalert/1080
http://www.securityfocus.com/archive/1/436561
http://www.vupen.com/english/advisories/2006/2282
https://exchange.xforce.ibmcloud.com/vulnerabilities/27131

Get alerted when CVE-2006-3001 or the next vulnerability affects your stack