CVE

Id
36875  
CVE No.
CVE-2008-6758  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.  
Phase
Assigned (20090428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401482 36875 CVE-2008-6758 BUGTRAQ:20081229 ViArt Shopping Cart v3.5 Multiple Remote Vulnerabilities  View
401483 36875 CVE-2008-6758 URL:http://www.securityfocus.com/archive/1/archive/1/499625/100/0/threaded  View
401484 36875 CVE-2008-6758 BID:33043  View
401485 36875 CVE-2008-6758 URL:http://www.securityfocus.com/bid/33043  View
401486 36875 CVE-2008-6758 OSVDB:51029  View
401487 36875 CVE-2008-6758 URL:http://osvdb.org/51029  View
401488 36875 CVE-2008-6758 OSVDB:53283  View
401489 36875 CVE-2008-6758 URL:http://osvdb.org/53283  View
401490 36875 CVE-2008-6758 SECTRACK:1021497  View
401491 36875 CVE-2008-6758 URL:http://www.securitytracker.com/id?1021497  View
401492 36875 CVE-2008-6758 SECUNIA:33340  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44568 JVNDB-2009-005575 WordPress の wp-admin/upgrade.php におけるオープンリダイレクトの脆弱性 WordPress の wp-admin/upgrade.php には、オープンリダイレクトの脆弱性が存在します。 CVE-2008-6762 36875 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005575.html  View