PT-2005-3799 · Miva · Miva Merchant

Published 2005-09-16 · Updated 2016-10-18 · CVE-2005-2953

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MIVA Merchant version 5

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Customer Login parameter in the merchant.mvc component.

Recommendations For MIVA Merchant version 5, avoid using the Customer Login parameter in the affected merchant.mvc component until a fix is available. Consider implementing input validation and sanitization for the Customer Login parameter to prevent XSS attacks.

Exploit

Fix

Related Identifiers

CVE-2005-2953

Affected Products

Miva Merchant

References · 6

• 🔥 https://exploit-db.com/exploits/26256 · Exploit
• 🔥 http://securityfocus.com/bid/14828 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2953 · Security Note
• http://secunia.com/advisories/16829 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2953 · Note
• http://marc.info/?l=bugtraq&m=112684680903655&w=2 · Note