CVE-2006-2669

Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php.

• CWE-79

• http://secunia.com/advisories/20295Patch, Vendor Advisory
• http://securityreason.com/securityalert/990
• http://www.osvdb.org/26080
• http://www.osvdb.org/26081
• http://www.osvdb.org/26082
• http://www.securityfocus.com/archive/1/435018/100/0/threaded
• http://www.securityfocus.com/bid/18706
• http://www.vupen.com/english/advisories/2006/1991Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26690
• http://secunia.com/advisories/20295Patch, Vendor Advisory
• http://securityreason.com/securityalert/990
• http://www.osvdb.org/26080
• http://www.osvdb.org/26081
• http://www.osvdb.org/26082
• http://www.securityfocus.com/archive/1/435018/100/0/threaded
• http://www.securityfocus.com/bid/18706
• http://www.vupen.com/english/advisories/2006/1991Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26690

Published

May 30, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2663Multiple cross-site scripting (XSS) vulnerabilities in iFlan…
• CVE-2006-2664Cross-site scripting (XSS) vulnerability in iFdate 1.2 allow…
• CVE-2006-2665PHP remote file inclusion vulnerability in includes/mailacce…
• CVE-2006-2666PHP remote file inclusion vulnerability in includes/mailacce…
• CVE-2006-2667Direct static code injection vulnerability in WordPress 2.0.…
• CVE-2006-2668Multiple PHP remote file inclusion vulnerabilities in Docebo…
• CVE-2006-2670Multiple cross-site scripting (XSS) vulnerabilities in ChatP…
• CVE-2006-2671SQL injection vulnerability in ChatPat 1.0 allows remote att…
• CVE-2006-2672Multiple cross-site scripting (XSS) vulnerabilities in Realt…
• CVE-2006-2673Cross-site scripting (XSS) vulnerability in search.html in B…
• CVE-2006-2674Multiple SQL injection vulnerabilities in Tamber Forum 1.9.1…
• CVE-2006-2675PHP remote file inclusion vulnerability in ubbt.inc.php in U…