CVE-2008-1458

Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected.

Link	Resource
http://www.securityfocus.com/bid/28333
http://secunia.com/advisories/29468	Vendor Advisory
http://securityreason.com/securityalert/3762	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41306
http://www.securityfocus.com/archive/1/489857/100/0/threaded

Configuration 1

cpe:2.3:a:cs-cart:cs-cart:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:cs-cart:cs-cart:1.3.2:sp2:trial_edition:*:*:*:*:*

---

Published : 2008-03-24 06:44

Updated : 2018-10-11 08:34

---

NVD link : CVE-2008-1458

Mitre link : CVE-2008-1458

No products.

CWE-79