6.8
CVE-2003-0523
- EPSS 3.3%
- Veröffentlicht 18.08.2003 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:02:21
- Erkennungen
Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Early Impact ≫ Productcart Version 1.5
Early Impact ≫ Productcart Version 1.6b
Early Impact ≫ Productcart Version 1.6b001
Early Impact ≫ Productcart Version 1.6b002
Early Impact ≫ Productcart Version 1.6b003
Early Impact ≫ Productcart Version 1.6br
Early Impact ≫ Productcart Version 1.6br001
Early Impact ≫ Productcart Version 1.6br003
Early Impact ≫ Productcart Version 1.5002
Early Impact ≫ Productcart Version 1.5003
Early Impact ≫ Productcart Version 1.5003r
Early Impact ≫ Productcart Version 1.5004
Early Impact ≫ Productcart Version 1.6002
Early Impact ≫ Productcart Version 1.6003
Early Impact ≫ Productcart Version 2
Early Impact ≫ Productcart Version 2br000
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.3% | 0.869 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=105761696706800&w=2