CVE-2005-1292

Description

Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20249

http://www.osvdb.org/15780

http://www.osvdb.org/15778

http://www.osvdb.org/15777

http://www.osvdb.org/15776

http://www.osvdb.org/15775

http://secunia.com/advisories/15055

http://marc.info/?l=bugtraq&m=111428393022389&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS