NVD

Id
24310  
Name
CVE-2015-2182  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr parameter in a brands action or (2) brand parameter in a viewbrands action to index.php. NOTE: The search parameter vector is already covered by CVE-2010-5322.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-03-11  
Modified Date
2015-03-11  
Seq
2015-2182  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128681 24310 CVE-2015-2182 http://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.html  View
128682 24310 CVE-2015-2182 20150223 ECommerce-Shopping Cart Zeuscart v. 4: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities  View
128683 24310 CVE-2015-2182 [oss-security] 20150223 CVE-Request -- Zeuscart v. 4 -- Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities  View
128684 24310 CVE-2015-2182 [oss-security] 20150302 Re: CVE-Request -- Zeuscart v. 4 -- Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities  View
128685 24310 CVE-2015-2182 http://secpod.org/advisories/SECPOD_ZeusCart_XSS.txt  View
128686 24310 CVE-2015-2182 http://secpod.org/blog/?p=109  View
128687 24310 CVE-2015-2182 http://sroesemann.blogspot.de/2015/01/sroeadv-2015-12.html  View
128688 24310 CVE-2015-2182 36159  View
128689 24310 CVE-2015-2182 72761  View
128690 24310 CVE-2015-2182 https://github.com/ZeusCart/zeuscart/issues/28  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6452 JVNDB-2015-001772 ZeusCart におけるクロスサイトスクリプティングの脆弱性 ZeusCart には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-2182 79407 CVE-2015-2182 24310 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001772.html 2015-01-21 2015-03-13 View