PT-2005-2566 · Unknown · Quick.Cart

Wizzud · Publicado 2005-05-14 · Atualizado 2008-09-05 · CVE-2005-1587

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Quick.cart version 0.3.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the sWord parameter in the "index.php" file.

Recommendations For Quick.cart version 0.3.0, avoid using the sWord parameter in the index.php file until a fix is available. As a temporary workaround, consider validating and sanitizing all user input to prevent malicious script injection.

Exploit

Correção

Identificadores relacionados

CVE-2005-1587

Produtos afetados

Quick.Cart

Referências · 8

• 🔥 https://exploit-db.com/exploits/25650 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html · Exploit
• 🔥 http://securityfocus.com/bid/13599 · Exploit
• 🔥 http://osvdb.org/16330 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1587 · Nota
• http://secunia.com/advisories/15297 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1587 · Nota de Segurança
• http://opensolution.org/forum/?p=readTopic&nr=948 · Nota