AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-3613

MEDIUM · CVSS 5.8 EPSS 1.15%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-07-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2006-3613
Severity
MEDIUM
CVSS
5.8
EPSS
1.15%

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka "Who is this item for?") and (2) special (aka "Special Instructions") parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php.