PT-2005-4969 · Zaygo · Zaygo Hostingcart

Published 2005-12-16 · Updated 2011-03-08 · CVE-2005-4281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zaygo HostingCart versions 2.0 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to "zaygo.cgi".

Recommendations For Zaygo HostingCart versions 2.0 and earlier, consider disabling the search module or restricting access to the root parameter in "zaygo.cgi" until a patch is available.

Fix

Related Identifiers

CVE-2005-4281

Affected Products

Zaygo Hostingcart

References · 5

• http://secunia.com/advisories/18036 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4281 · Security Note
• http://osvdb.org/21729 · Note
• http://pridels0.blogspot.com/2005/12/hostingcart-xss.html · Note
• http://vupen.com/english/advisories/2005/2916 · Note