AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-5119

MEDIUM · CVSS 4 EPSS 1.72%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-10-03 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.0. It may be remotely exploitable.

CVE
CVE-2006-5119
Severity
MEDIUM
CVSS
4
EPSS
1.72%

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php, or the (3) admin_email parameter in (b) admin/password_forgotten.php.