CVE-2008-4637

Cross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121.

Link	Resource
http://cpcommerce.cpradio.org/	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46090

Configuration 1

cpe:2.3:a:cpcommerce:cpcommerce:1.0.6:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.7:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.2.0:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:*:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.8:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.1:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.3:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.5:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.9:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.2:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.5.1:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.1.0:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:0.5f:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.9a:*:*:*:*:*:*:* cpe:2.3:a:cpcommerce:cpcommerce:1.0.7.4:*:*:*:*:*:*:*

---

Published : 2008-10-21 06:00

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4637

Mitre link : CVE-2008-4637

No products.

CWE-79