CVE-2006-1025: Cross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote atta...

Security readout for executives and security teams

CVE-2006-1025 describes a reported cross-site scripting flaw in Addsoft StoreBot 2002 Standard. An attacker could cause malicious script or HTML to run in a user's browser through the ShipMethod parameter in manage.asp. The CVE warns that the provenance is unknown and details come only from third-party information. Exposure is likely limited to organizations still running legacy Addsoft StoreBot 2002 Standard, especially if manage.asp is reachable by users or the internet. The source bundle does not identify other affected products or versions. Treat this as an inventory-driven legacy risk. It is not currently supported by strong severity or exploitation evidence, but any internet-facing legacy commerce administration page should be reviewed promptly. Mitigation focus: Inventory systems for Addsoft StoreBot 2002 Standard and manage.asp exposure.; Check vendor or archived advisory guidance for an official fix or upgrade path.; Restrict access to manage.asp to trusted administrative networks or authenticated users..

Prepared

Jun 29, 2026, 14:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.