CVE-2006-0532: MEDIA2 CMS Shop

Medium severity, CVSS 4.3. EPSS: 4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute.

Affected products

• MEDIA2 CMS Shop: any version

Published 2006-02-04. Last modified 2026-06-16.