CVE-2005-3736

Description

Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp.

References

http://www.osvdb.org/20996

http://www.osvdb.org/20995

http://www.osvdb.org/20994

http://www.osvdb.org/20993

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS