NVD

Id
45681  
Name
CVE-2012-4241  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Microcart 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or (2) query string to _admin/index.php or (3) first_name, (4) last_name, (5) cc, (6) exp, (7) cvv, (8) address1, (9) address2, (10) city, (11) state, (12) zip, (13) phone, or (14) email parameter to checkout.php, which is not properly handled in an error message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-08-12  
Modified Date
2014-08-13  
Seq
2012-4241  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229304 45681 CVE-2012-4241 http://packetstormsecurity.com/files/116714/Microcart-1.0-Checkout-Cross-Site-Scripting.html  View
229305 45681 CVE-2012-4241 http://packetstormsecurity.com/files/116721/Microcart-1.0-Cross-Site-Scripting.html  View
229306 45681 CVE-2012-4241 http://www.reactionpenetrationtesting.co.uk/microcart-_admin-xss.html  View
229307 45681 CVE-2012-4241 http://www.reactionpenetrationtesting.co.uk/microcart-checkout-xss.html  View
229308 45681 CVE-2012-4241 55620  View
229309 45681 CVE-2012-4241 microcart-index-xss(78690)  View
229310 45681 CVE-2012-4241 microcart-checkout-xss(78691)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30546 JVNDB-2012-006254 Microcart におけるクロスサイトスクリプティングの脆弱性 Microcart には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4241 57479 CVE-2012-4241 45681 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006254.html 2012-07-23 2014-08-14 View