4.3
CVE-2005-2138
- EPSS 0.99%
- Veröffentlicht 05.07.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:20
- Erkennungen
LoginCross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Comdev ≫ Comdev Ecommerce Version 3.0
Comdev ≫ Comdev Ecommerce Version 3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.99% | 0.58 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=64
http://secunia.com/advisories/15865