NVD

Id
3979  
Name
CVE-2008-4121  
Description
Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-10-21  
Modified Date
2012-10-29  
Seq
2008-4121  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25363 3979 CVE-2008-4121 http://cpcommerce.cpradio.org/  View
25364 3979 CVE-2008-4121 4448  View
25365 3979 CVE-2008-4121 http://www.datensalat.eu/~fabian/cve/CVE-2008-4121-cpcommerce.html  View
25366 3979 CVE-2008-4121 20081019 Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121  View
25367 3979 CVE-2008-4121 31825  View
25368 3979 CVE-2008-4121 1021070  View
25369 3979 CVE-2008-4121 cpcommerce-search-sendtofriend-xss(45970)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48129 JVNDB-2008-003439 cpCommerce におけるクロスサイトスクリプティングの脆弱性 cpCommerce には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4121 34234 CVE-2008-4121 3979 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003439.html 2008-10-21 2012-06-26 View