PT-2005-2033 · Comersus · Comersus Cart

Published 2005-04-08 · Updated 2017-07-11 · CVE-2005-1010

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Comersus Cart version 6

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the username variable. This can lead to the execution of malicious code on the victim's browser.

Recommendations For Comersus Cart version 6, update the software to a version that fixes this issue, ensuring that user input, such as the username, is properly sanitized to prevent code injection. As a temporary workaround, consider validating and escaping all user input to prevent XSS attacks.

Fix

Related Identifiers

CVE-2005-1010

Affected Products

Comersus Cart

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-1010 · Security Note
• http://securityfocus.com/bid/13000 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1010 · Note
• http://secunia.com/advisories/14825 · Note
• http://securitytracker.com/id?1013634 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19962 · Note