{"api_version":"1","generated_at":"2026-07-23T11:37:12+00:00","cve":"CVE-2006-6153","urls":{"html":"https://cve.report/CVE-2006-6153","api":"https://cve.report/api/cve/CVE-2006-6153.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-6153","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-6153"},"summary":{"title":"CVE-2006-6153","description":"Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-11-28 23:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/452179/100/100/threaded","name":"http://www.securityfocus.com/archive/1/452179/100/100/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1926","name":"http://securityreason.com/securityalert/1926","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CXSecurity - IDS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47","name":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"],"title":"s-a-p.ca","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1017259","name":"http://securitytracker.com/id?1017259","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Classified System Input Validation Holes Permit Cross-Site Scripting Attacks and SQL Command Injection","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/21190","name":"http://www.securityfocus.com/bid/21190","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"VSpin Classified System Multiple Parameters And Scripts Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/22987","name":"http://secunia.com/advisories/22987","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Classified System 2004 Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-6153","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-6153","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"6153","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"vspin.net","cpe5":"classified_system","cpe6":"2004","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T20:19:34.634Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"22987","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22987"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47"},{"name":"1017259","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1017259"},{"name":"1926","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/1926"},{"name":"21190","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/21190"},{"name":"classifiedsystem-catsearch-xss(30446)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446"},{"name":"20061119 Classified System [injection sql]","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/452179/100/100/threaded"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-11-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"22987","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22987"},{"tags":["x_refsource_MISC"],"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47"},{"name":"1017259","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1017259"},{"name":"1926","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/1926"},{"name":"21190","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/21190"},{"name":"classifiedsystem-catsearch-xss(30446)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446"},{"name":"20061119 Classified System [injection sql]","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/452179/100/100/threaded"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-6153","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"22987","refsource":"SECUNIA","url":"http://secunia.com/advisories/22987"},{"name":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47","refsource":"MISC","url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47"},{"name":"1017259","refsource":"SECTRACK","url":"http://securitytracker.com/id?1017259"},{"name":"1926","refsource":"SREASON","url":"http://securityreason.com/securityalert/1926"},{"name":"21190","refsource":"BID","url":"http://www.securityfocus.com/bid/21190"},{"name":"classifiedsystem-catsearch-xss(30446)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446"},{"name":"20061119 Classified System [injection sql]","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/452179/100/100/threaded"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-6153","datePublished":"2006-11-28T23:00:00.000Z","dateReserved":"2006-11-28T00:00:00.000Z","dateUpdated":"2024-08-07T20:19:34.634Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-11-28 23:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vspin.net:classified_system:2004:*:*:*:*:*:*:*","matchCriteriaId":"CCFD0151-8EF1-437B-B718-4801544F5768"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"6153","Ordinal":"1","Title":"CVE-2006-6153","CVE":"CVE-2006-6153","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"6153","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.","Type":"Description","Title":"CVE-2006-6153"},{"CveYear":"2006","CveId":"6153","Ordinal":"2","NoteData":"2006-11-28","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"6153","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}