PT-2005-2178 · Oneworld · Oneworldstore

·

CVE-2005-1162

·

Publicado

2005-04-18

·

Atualizado

2024-02-14

CVSS v2.0

5.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions OneWorldStore (affected versions not specified)
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected parameters and fields include the sEmail parameter to "owContactUs.asp", the bSub parameter to "owListProduct.asp", and the Name, Email, or Comment fields in "owProductDetail.asp".
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-1162

Produtos afetados

Oneworldstore