PT-2005-4648 · Ghostscript · Ghostscripter Amazon Shop

Published 2005-11-30 · Updated 2011-03-08 · CVE-2005-3908

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GhostScripter Amazon Shop versions 5.0.0 through 5.0.1

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject web script or HTML. This is achieved via the query parameter in the search.php file.

Recommendations For GhostScripter Amazon Shop versions 5.0.0 through 5.0.1, update to version 5.0.2 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2005-3908

Affected Products

Ghostscripter Amazon Shop

References · 8

• 🔥 http://securityfocus.com/bid/15634 · Exploit
• 🔥 https://exploit-db.com/exploits/26653 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3908 · Security Note
• http://secunia.com/advisories/17750 · Vendor Advisory
• http://pridels0.blogspot.com/2005/11/amazon-shop-500-xss-vuln.html · Note
• http://attrition.org/pipermail/vim/2007-May/001603.html · Note
• http://osvdb.org/21371 · Note
• http://vupen.com/english/advisories/2005/2630 · Note