5.8

CVE-2005-1162

Exploit
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.57% 0.919
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=111352017704126&w=2
http://secunia.com/advisories/14969
Patch
Vendor Advisory
http://securitytracker.com/id?1013720
Patch
Exploit
http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab
Vendor Advisory
URL Repurposed
http://www.osvdb.org/15521
Exploit
http://www.osvdb.org/15522
Exploit
http://www.osvdb.org/15523
Exploit
http://www.securityfocus.com/bid/13184
Patch
Exploit
http://www.securityfocus.com/bid/13185
Patch
Exploit
http://www.securityfocus.com/bid/13186
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/20096