CVE-2006-5190

EPSS 4.93% · P90 Updated Feb 27, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-5190

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

osCommerce多个跨站脚本攻击漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

osCommerce 2.2 Milestone 2 Update 060817中的多个跨站脚本攻击漏洞，远程攻击者可以通过(1)在(a)banner_manager.php，(b)banner_statistics.php，(c)countries.php，(d)currencies.php，(e)languages.php，(f)manufacturers.php，(g)newsletters.php，(h)orders_status.php，(i)products_attributes.php，(j

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2006-5190

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2006-5190

请登录查看更多情报信息。

http://lostmon.blogspot.com/2006/10/oscommerce-multiple-scripts-page-param.htmlx_refsource_MISC
http://www.osvdb.org/29806vdb-entryx_refsource_OSVDB
https://www.exploit-db.com/exploits/28753/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28750/exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/20343vdb-entryx_refsource_BID
http://www.osvdb.org/29805vdb-entryx_refsource_OSVDB
https://www.exploit-db.com/exploits/28756/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28754/exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/29810vdb-entryx_refsource_OSVDB
https://www.exploit-db.com/exploits/28752/exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/29796vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29811vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29797vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29795vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29808vdb-entryx_refsource_OSVDB
osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting - PHP webapps Exploitexploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28746/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28748/exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/22275third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/29800vdb-entryx_refsource_OSVDB
https://www.exploit-db.com/exploits/28747/exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/29802vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29801vdb-entryx_refsource_OSVDB
https://www.exploit-db.com/exploits/28744/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28743/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28758/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28759/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28757/exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/28749/exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/29798vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29803vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29807vdb-entryx_refsource_OSVDB
http://www.osvdb.org/29809vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1016979vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/3917vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29355vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2006-5190

Same Patch Batch · n/a · 2006-10-06 · 25 CVEs total

CVE-2006-5188		WEBGENEius GOOP Gallery 'download.php'目录遍历漏洞
CVE-2006-5181		Joshua Muheim phpMyWebmin 多个PHP远程文件包含漏洞
CVE-2006-5180		Sebastian Baumann和Philipp Wolfer Newswriter SW 'include/main.inc.php'PHP远程文件包含漏洞
CVE-2006-5179		Intoto iGateway VPN和iGateway SSL-VPN 拒绝服务攻击漏洞
CVE-2006-5178		PHP符号链接绕过open_basedir功能安全限制漏洞
CVE-2006-5177		MailEnable SMTP NTLM认证多个预认证漏洞
CVE-2006-5176		MailEnable处理畸形消息远程代码执行及拒绝服务漏洞
CVE-2006-5175		TeraStation HD-HTGL固件管理界面跨站请求伪造漏洞
CVE-2006-5193		RETIRED: WikyBlog 'index.php'远程文件包含漏洞
CVE-2006-5192		PHPGreetz 'Footer.PHP'远程文件包含漏洞
CVE-2006-5191		phpBB Nivisec Static Topics模块 'functions_static_topics.php'PHP远程文件包含漏洞
CVE-2006-5189		Klinza Professional CMS 'funzioni/lib/show_hlp.php'远程文件包含漏洞
CVE-2006-5194		Net2FTP 'index.php'跨站脚本攻击漏洞
CVE-2006-5187		Bulletin Board Ace 'includes/functions.php'远程文件包含漏洞
CVE-2006-5186		PHPMyProfiler 'functions.php'远程文件包含漏洞
CVE-2006-5185		HAMweather 'Template.PHP'脚本代码注入漏洞
CVE-2006-5184		Taskjitsu密钥参数SQL注入漏洞
CVE-2006-5183		Dayfox Designs Dayfox Blog 多个PHP远程包含漏洞.
CVE-2006-5182		Travelsized CMS 'Frontpage.PHP'PHP远程文件包含漏洞
CVE-2006-5143		CA产品消息引擎RPC服务器多个缓冲区错误漏洞

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2006-5190

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2006-5190

I. Basic Information for CVE-2006-5190

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2006-5190

III. Intelligence Information for CVE-2006-5190

Same Patch Batch · n/a · 2006-10-06 · 25 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2006-5190

Leave a comment