exploitDog

GHSA-p53h-6r6x-52mq

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-1188
https://exchange.xforce.ibmcloud.com/vulnerabilities/20147
http://lostmon.blogspot.com/2005/04/comersus-asp-shopping-cart-variable.html
http://securitytracker.com/id?1013747
http://www.osvdb.org/15539
http://www.securityfocus.com/bid/13125

EPSS

Процентиль: 88%

0.0362

Низкий

CVE ID

Связанные уязвимости

CVE-2005-1188

nvd

больше 21 года назад

Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

EPSS

Процентиль: 88%

0.0362

Низкий

CVE ID