CVE-2006-0237: Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject ar...

Security readout for executives and security teams

CVE-2006-0237 is a reported cross-site scripting issue in GTP iCommerce. If a vulnerable store is still online, an attacker could make crafted links that cause a visitor’s browser to run attacker-supplied script in the site’s context. The public record says the details come only from third-party information. Exposure is most likely limited to legacy GTP iCommerce deployments that still expose index.php and accept cat or subcat parameters. The source bundle does not identify affected versions or confirm whether all installations are vulnerable. Treat this as a legacy exposure question, not a confirmed urgent incident. Prioritize if GTP iCommerce is still internet-facing or handles authenticated customer sessions; otherwise track as low-confidence historical debt. Mitigation focus: Identify whether any public site still runs GTP iCommerce.; Check vendor or archived advisory guidance for fixed versions or workarounds.; If unsupported, retire, isolate, or replace the application..

Prepared

Jun 29, 2026, 15:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.