CVE-2006-0111: Boxcar Media Shopping Cart

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) parent or (2) pg parameter.

Affected products

• Boxcar Media Shopping Cart: any version

Published 2006-01-07. Last modified 2026-06-16.