Published: 04/01/2008 Updated: 15/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 450

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions prior to 1.1.0, allow remote malicious users to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, (3) the return parameter to the order script, or (4) the email parameter to user/remindComplete.

Vulnerable Product	Search on Vulmon	Subscribe to Product
integry systems livecart 1.0.1

source: wwwsecurityfocuscom/bid/27087/info LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the atta ...

source: wwwsecurityfocuscom/bid/27087/info LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the ...

source: wwwsecurityfocuscom/bid/27087/info LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow th ...

source: wwwsecurityfocuscom/bid/27087/info LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the at ...

CWE-79 http://www.hackerscenter.com/archive/view.asp?id=28144 http://www.securityfocus.com/bid/27087 http://www.securitytracker.com/id?1019151 http://secunia.com/advisories/28017 http://securityreason.com/securityalert/3512 http://livecart.com/news/Major-update-LiveCart-1-1-0.8 http://osvdb.org/39758 http://osvdb.org/39757 http://archives.neohapsis.com/archives/bugtraq/2008-02/0003.html http://osvdb.org/39756 https://exchange.xforce.ibmcloud.com/vulnerabilities/39305 http://www.securityfocus.com/archive/1/485654/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/30964/

CVE-2007-6646

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect