6.8

CVE-2005-1440

Exploit
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.19% 0.864
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html
Exploit
http://secunia.com/advisories/15181
http://securitytracker.com/id?1013853
Exploit
http://www.osvdb.org/15951
Vendor Advisory
Exploit
http://www.osvdb.org/15952
http://www.osvdb.org/15953
http://www.osvdb.org/15954
http://www.osvdb.org/15955
http://www.osvdb.org/15956
http://www.osvdb.org/15957
http://www.osvdb.org/15958
http://www.securityfocus.com/bid/13462
Exploit