NVD

Id
67178  
Name
CVE-2005-1440  
Description
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-03  
Modified Date
2008-09-05  
Seq
2005-1440  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
348444 67178 CVE-2005-1440 http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html  View
348445 67178 CVE-2005-1440 1013853  View
348446 67178 CVE-2005-1440 13462  View

Related JVN