← Zuruck zu CVEs

CVE-2005-1823

N/A

Beschreibung

Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht6/1/2005

Zuletzt geandert4/16/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

qualiteam:x-cart

Referenzen

http://marc.info/?l=bugtraq&m=111748583101076&w=2(cve@mitre.org)

http://secunia.com/advisories/15555(cve@mitre.org)

http://securitytracker.com/id?1014077(cve@mitre.org)

http://www.securityfocus.com/bid/13817(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/20774(cve@mitre.org)

http://marc.info/?l=bugtraq&m=111748583101076&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/15555(af854a3a-2127-422b-91ae-364da2661108)

http://securitytracker.com/id?1014077(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/13817(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/20774(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.