{"id":"CVE-2006-6153","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-6153","generatedAt":"2026-10-27T20:41:53.030Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.","description":"Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp.","published":"2006-11-28T23:28:00.000Z","lastModified":"2026-06-16T22:32:34.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":[],"affected":["vspin.net/classified system"],"epss":{"score":0.02149,"percentile":0.81997,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2006-11-20","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":29106,"kind":"exploit","title":"vSpin Classified System 2004 - 'search.asp?minprice' Cross-Site Scripting","url":"https://www.exploit-db.com/exploits/29106","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/asp/webapps/29106.txt","file":"exploits/asp/webapps/29106.txt","published":"2006-11-20","added":"2006-11-20","updated":"2013-10-21","author":"laurent gaffie","type":"webapps","platform":"asp","port":null,"verified":true,"codes":["CVE-2006-6153","OSVDB-30568"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/21190/info"},{"edbId":29105,"kind":"exploit","title":"vSpin Classified System 2004 - 'cat.asp?catname' Cross-Site Scripting","url":"https://www.exploit-db.com/exploits/29105","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/asp/webapps/29105.txt","file":"exploits/asp/webapps/29105.txt","published":"2006-11-20","added":"2006-11-20","updated":"2013-10-21","author":"laurent gaffie","type":"webapps","platform":"asp","port":null,"verified":true,"codes":["CVE-2006-6153","OSVDB-30567"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/21190/info"}]},"verdict":{"level":"high","text":"2 public exploits are published in Exploit-DB (verified), so the technical barrier is gone even though the severity is medium and EPSS is 2.1%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47","tags":["URL Repurposed"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22987","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/1926","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1017259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/452179/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/21190","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446","source":"cve@mitre.org"},{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=47","tags":["URL Repurposed"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22987","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/1926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/452179/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/21190","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30446","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-6153","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}