CVE

Id
14358  
CVE No.
CVE-2005-3152  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php. Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1.  
Phase
Assigned (20051005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
107036 14358 CVE-2005-3152 MISC:http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html  View
107037 14358 CVE-2005-3152 MISC:http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html  View
107038 14358 CVE-2005-3152 MISC:http://bugs.cubecart.com/?do=details&id=459  View
107039 14358 CVE-2005-3152 CONFIRM:http://bugs.cubecart.com/?do=details&id=363  View
107040 14358 CVE-2005-3152 BID:14962  View
107041 14358 CVE-2005-3152 URL:http://www.securityfocus.com/bid/14962  View
107042 14358 CVE-2005-3152 SECTRACK:1014984  View
107043 14358 CVE-2005-3152 URL:http://securitytracker.com/id?1014984  View
107044 14358 CVE-2005-3152 SREASON:35  View
107045 14358 CVE-2005-3152 URL:http://securityreason.com/securityalert/35  View
107046 14358 CVE-2005-3152 XF:cubecart-index-script-xss(24177)  View

Related JVN