NVD

Id
68814  
Name
CVE-2005-3152  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php. Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-10-05  
Modified Date
2017-07-10  
Seq
2005-3152  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
355482 68814 CVE-2005-3152 http://bugs.cubecart.com/?do=details&id=363  View
355483 68814 CVE-2005-3152 http://bugs.cubecart.com/?do=details&id=459  View
355484 68814 CVE-2005-3152 http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html  View
355485 68814 CVE-2005-3152 http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html  View
355486 68814 CVE-2005-3152 35  View
355487 68814 CVE-2005-3152 1014984  View
355488 68814 CVE-2005-3152 14962  View
355489 68814 CVE-2005-3152 cubecart-index-script-xss(24177)  View

Related JVN