Published: 04/01/2007 Updated: 16/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 710

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote malicious users to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php and (b) ashop/basket.php, the (2) exp parameter to ashop/catalogue.php, the (3) searchstring parameter to (c) ashop/search.php, the (4) checkout and (5) action parameters to (d) ashop/shipping.php, the cat parameter to (f) cart-path/admin/editcatalogue.php, and the (7) resultpage parameter to (g) cart-path/admin/salesadmin.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ashopsoftware ashop administration panel
ashopsoftware ashop deluxe 4.5

source: wwwsecurityfocuscom/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th ...

source: wwwsecurityfocuscom/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the ...

source: wwwsecurityfocuscom/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the co ...

source: wwwsecurityfocuscom/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user i ...

source: wwwsecurityfocuscom/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user ...

source: wwwsecurityfocuscom/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in ...

NVD-CWE-Other http://www.securityfocus.com/bid/21845 http://secunia.com/advisories/23547 http://securityreason.com/securityalert/2091 http://osvdb.org/32557 http://osvdb.org/32556 http://osvdb.org/32558 http://osvdb.org/32553 http://osvdb.org/32554 http://osvdb.org/32555 http://www.vupen.com/english/advisories/2007/0028 https://exchange.xforce.ibmcloud.com/vulnerabilities/31178 http://www.securityfocus.com/archive/1/455629/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29379/

CVE-2007-0056

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect