PT-2005-3799 · Miva · Miva Merchant

Publicado 2005-09-16 · Atualizado 2016-10-18 · CVE-2005-2953

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MIVA Merchant version 5

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Customer Login parameter in the merchant.mvc component.

Recommendations For MIVA Merchant version 5, avoid using the Customer Login parameter in the affected merchant.mvc component until a fix is available. Consider implementing input validation and sanitization for the Customer Login parameter to prevent XSS attacks.

Exploit

Correção

Identificadores relacionados

CVE-2005-2953

Produtos afetados

Miva Merchant

Referências · 6

• 🔥 https://exploit-db.com/exploits/26256 · Exploit
• 🔥 http://securityfocus.com/bid/14828 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2953 · Nota de Segurança
• http://secunia.com/advisories/16829 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2953 · Nota
• http://marc.info/?l=bugtraq&m=112684680903655&w=2 · Nota