CVE

Id
12368  
CVE No.
CVE-2005-1162  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.  
Phase
Assigned (20050418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
88825 12368 CVE-2005-1162 BUGTRAQ:20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore  View
88826 12368 CVE-2005-1162 URL:http://marc.info/?l=bugtraq&m=111352017704126&w=2  View
88827 12368 CVE-2005-1162 CONFIRM:http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab  View
88828 12368 CVE-2005-1162 BID:13184  View
88829 12368 CVE-2005-1162 URL:http://www.securityfocus.com/bid/13184  View
88830 12368 CVE-2005-1162 BID:13185  View
88831 12368 CVE-2005-1162 URL:http://www.securityfocus.com/bid/13185  View
88832 12368 CVE-2005-1162 BID:13186  View
88833 12368 CVE-2005-1162 URL:http://www.securityfocus.com/bid/13186  View
88834 12368 CVE-2005-1162 OSVDB:15521  View
88835 12368 CVE-2005-1162 URL:http://www.osvdb.org/15521  View
88836 12368 CVE-2005-1162 OSVDB:15522  View
88837 12368 CVE-2005-1162 URL:http://www.osvdb.org/15522  View
88838 12368 CVE-2005-1162 OSVDB:15523  View
88839 12368 CVE-2005-1162 URL:http://www.osvdb.org/15523  View
88840 12368 CVE-2005-1162 SECTRACK:1013720  View
88841 12368 CVE-2005-1162 URL:http://securitytracker.com/id?1013720  View
88842 12368 CVE-2005-1162 SECUNIA:14969  View
88843 12368 CVE-2005-1162 URL:http://secunia.com/advisories/14969  View
88844 12368 CVE-2005-1162 XF:oneworldstore-xss(20096)  View

Related JVN