Approved changes feed: RSS · Atom

cpe:2.3:a:review-script.com:five_star_review_script:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorReview Script.Com (87a8a77d-cff5-504b-9066-9e17a469f299)
ProductFive Star Review Script (979f7d96-05d6-5161-b716-0123de6f423a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3061 vulnerable 2026-06-08 04:49:08.183403 Details available
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.
Published: 2006-06-19T10:00:00.000Z
Updated: 2024-08-07T18:16:05.401Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.