4.3
CVE-2005-4314
- EPSS 1.75%
- Veröffentlicht 17.12.2005 00:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:34
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) stop and (2) user parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ppcal Shopping Cart ≫ Ppcal Shopping Cart Version <= 3.3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.75% | 0.75 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2005/12/ppcal-shopping-cart-xss.html
http://secunia.com/advisories/18032
http://www.securityfocus.com/bid/15892
http://www.vupen.com/english/advisories/2005/2918