PT-2005-2033 · Comersus · Comersus Cart

Publicado 2005-04-08 · Atualizado 2017-07-11 · CVE-2005-1010

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Comersus Cart version 6

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the username variable. This can lead to the execution of malicious code on the victim's browser.

Recommendations For Comersus Cart version 6, update the software to a version that fixes this issue, ensuring that user input, such as the username, is properly sanitized to prevent code injection. As a temporary workaround, consider validating and escaping all user input to prevent XSS attacks.

Correção

Identificadores relacionados

CVE-2005-1010

Produtos afetados

Comersus Cart

Referências · 6

• http://securityfocus.com/bid/13000 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1010 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1010 · Nota de Segurança
• http://secunia.com/advisories/14825 · Nota
• http://securitytracker.com/id?1013634 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19962 · Nota