Published: 05/10/2005 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote malicious users to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php. Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
devellion cubecart 3.0.3
devellion cubecart 3.0.7-pl1

source: wwwsecurityfocuscom/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the con ...

source: wwwsecurityfocuscom/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the c ...

NVD-CWE-Other http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html http://bugs.cubecart.com/?do=details&id=363 http://www.securityfocus.com/bid/14962 http://securitytracker.com/id?1014984 http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html http://bugs.cubecart.com/?do=details&id=459 http://securityreason.com/securityalert/35 https://exchange.xforce.ibmcloud.com/vulnerabilities/24177 https://nvd.nist.gov https://www.exploit-db.com/exploits/26303/

CVE-2005-3152

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect