CVE-2006-5247

Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script or HTML via easycart.php, possibly related to the (1) des and (2) qty parameters in an add action, and via other unspecified vectors. NOTE: some details are obtained from third party information.

• http://secunia.com/advisories/22286Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1717
• http://securitytracker.com/id?1017041
• http://www.mayhemiclabs.com/advisories/MHL-2006-01.txtVendor Advisory
• http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001Vendor Advisory
• http://www.securityfocus.com/archive/1/448094/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29421
• http://secunia.com/advisories/22286Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1717
• http://securitytracker.com/id?1017041
• http://www.mayhemiclabs.com/advisories/MHL-2006-01.txtVendor Advisory
• http://www.mayhemiclabs.com/wiki/wikka.php?wakka=MHL2006001Vendor Advisory
• http://www.securityfocus.com/archive/1/448094/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29421

Published

Oct 12, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5241Multiple PHP remote file inclusion vulnerabilities in OpenDo…
• CVE-2006-5242SQL injection vulnerability in Etomite Content Management Sy…
• CVE-2006-5243Multiple PHP remote file inclusion vulnerabilities in OpenDo…
• CVE-2006-5244Multiple PHP remote file inclusion vulnerabilities in OpenDo…
• CVE-2006-5245Eazy Cart allows remote attackers to bypass authentication a…
• CVE-2006-5246Eazy Cart allows remote attackers to change prices and other…
• CVE-2006-5248Eazy Cart stores sensitive information under the web root wi…
• CVE-2006-5249PHP remote file inclusion vulnerability in tagmin/delTagUser…
• CVE-2006-5250PHP remote file inclusion vulnerability in lib/googlesearch/…
• CVE-2006-5251PHP remote file inclusion vulnerability in index.php in Deep…
• CVE-2006-5252PHP remote file inclusion vulnerability in includes/core.lib…
• CVE-2006-5253PHP remote file inclusion vulnerability in strload.php in Da…