CVE-2005-4530

Description

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters in (1) profile.htm, (2) card.htm, (3) bank.htm, (4) subscriptions.htm, (5) send.htm, (6) request.htm, (7) forgot.htm, (8) escrow.htm, (9) donations.htm, and (10) products.htm.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23852

http://www.vupen.com/english/advisories/2005/3074

http://www.securityfocus.com/bid/16055

http://www.osvdb.org/21892

http://www.osvdb.org/21891

http://www.osvdb.org/21890

http://www.osvdb.org/21889

http://www.osvdb.org/21888

http://www.osvdb.org/21887

http://www.osvdb.org/21886

http://www.osvdb.org/21885

http://www.osvdb.org/21884

http://www.osvdb.org/21883

http://secunia.com/advisories/18153

http://pridels0.blogspot.com/2005/12/alstrasoft-epay-enterprise-v30-xss.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS