CVE-2006-6153

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-28 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.

Affected products

Vspin.Net Classified System: 2004

References

http://s-a-p.ca/index.php?page=OurAdvisories&id=47
http://secunia.com/advisories/22987
http://securityreason.com/securityalert/1926
http://securitytracker.com/id?1017259
http://www.securityfocus.com/archive/1/452179/100/100/threaded
http://www.securityfocus.com/bid/21190
https://exchange.xforce.ibmcloud.com/vulnerabilities/30446
http://s-a-p.ca/index.php?page=OurAdvisories&id=47
http://secunia.com/advisories/22987
http://securityreason.com/securityalert/1926
http://securitytracker.com/id?1017259
http://www.securityfocus.com/archive/1/452179/100/100/threaded

Get alerted when CVE-2006-6153 or the next vulnerability affects your stack