NVD

Id
67224  
Name
CVE-2005-1486  
Description
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php. NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed. The original researcher is known to be unreliable.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-05-11  
Modified Date
2017-07-10  
Seq
2005-1486  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
348667 67224 CVE-2005-1486 20050504 Multiple SQL injections and XSS in FishCart 3.1  View
348668 67224 CVE-2005-1486 http://www.digitalparadox.org/advisories/fishc.txt  View
348669 67224 CVE-2005-1486 [fishcart] 20050521 Re: Concerned about security  View
348670 67224 CVE-2005-1486 20070123 Re: Multiple SQL injections and XSS in FishCart 3.1  View
348671 67224 CVE-2005-1486 13499  View
348672 67224 CVE-2005-1486 fishcart-multiple-xss(20384)  View

Related JVN