CVE

Id
12692  
CVE No.
CVE-2005-1486  
Status
Candidate  
Description
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php. NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed. The original researcher is known to be unreliable.  
Phase
Assigned (20050511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
91412 12692 CVE-2005-1486 BUGTRAQ:20050504 Multiple SQL injections and XSS in FishCart 3.1  View
91413 12692 CVE-2005-1486 URL:http://marc.info/?l=bugtraq&m=111530799109755&w=2  View
91414 12692 CVE-2005-1486 BUGTRAQ:20070123 Re: Multiple SQL injections and XSS in FishCart 3.1  View
91415 12692 CVE-2005-1486 URL:http://www.securityfocus.com/archive/1/archive/1/457754/100/200/threaded  View
91416 12692 CVE-2005-1486 MLIST:[fishcart] 20050521 Re: Concerned about security  View
91417 12692 CVE-2005-1486 URL:http://www.fishcart.org/archives/200505/msg00028.html  View
91418 12692 CVE-2005-1486 MISC:http://www.digitalparadox.org/advisories/fishc.txt  View
91419 12692 CVE-2005-1486 BID:13499  View
91420 12692 CVE-2005-1486 URL:http://www.securityfocus.com/bid/13499  View
91421 12692 CVE-2005-1486 OSVDB:16280  View
91422 12692 CVE-2005-1486 URL:http://www.osvdb.org/16280  View
91423 12692 CVE-2005-1486 OSVDB:16281  View
91424 12692 CVE-2005-1486 URL:http://www.osvdb.org/16281  View
91425 12692 CVE-2005-1486 SECUNIA:15232  View
91426 12692 CVE-2005-1486 URL:http://secunia.com/advisories/15232/  View
91427 12692 CVE-2005-1486 XF:fishcart-multiple-xss(20384)  View

Related JVN