Published: 21/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote malicious users to inject arbitrary web script or HTML via the redirectUrl parameter to (1) comersus_customerAuthenticateForm.asp or (2) comersus_message.asp, different vectors than CVE-2004-0681.

Vulnerable Product	Search on Vulmon	Subscribe to Product
comersus open technologies comersus cart 7.07

source: wwwsecurityfocuscom/bid/24562/info Comersus Cart is affected by multiple input validation vulnerabilities A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database The attacker may also leverage this issue to execute arbitrary ...

source: wwwsecurityfocuscom/bid/24562/info Comersus Cart is affected by multiple input validation vulnerabilities A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database The attacker may also leverage this issue to execute arbitrary cod ...

NVD-CWE-Other http://www.securityfocus.com/bid/24562 http://securityreason.com/securityalert/2819 http://osvdb.org/36154 http://osvdb.org/36153 https://exchange.xforce.ibmcloud.com/vulnerabilities/34954 http://www.securityfocus.com/archive/1/471837/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30205/

CVE-2007-3324

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect