4.3
CVSSv2

CVE-2005-0981

Published: 02/05/2005 Updated: 18/10/2016
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote malicious users to inject arbitrary web script or HTML via the (1) payment or (2) send parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

alstrasoft epay 2.0

Exploits

source: wwwsecurityfocuscom/bid/12974/info It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities These problems present themselves when malicious HTML and script code is sent to the application through multiple parameters This issue may allow for theft of cookie-based authentication credentials or ot ...