CVE-2006-3141

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-22 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter.

Affected products

Dpivision Tradingeye Shop: through r4

References

http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html
http://secunia.com/advisories/20736
http://www.osvdb.org/26637
http://www.securityfocus.com/bid/18526
http://www.vupen.com/english/advisories/2006/2424
https://exchange.xforce.ibmcloud.com/vulnerabilities/27202
http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html
http://secunia.com/advisories/20736
http://www.osvdb.org/26637
http://www.securityfocus.com/bid/18526
http://www.vupen.com/english/advisories/2006/2424
https://exchange.xforce.ibmcloud.com/vulnerabilities/27202

Get alerted when CVE-2006-3141 or the next vulnerability affects your stack