Description
Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL.
References
- 20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities mailing-list
- 1009403 vdb-entry
- http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43
- http://www.s-quadra.com/advisories/Adv-20040312.txt
- 9856 vdb-entry
- 4230 vdb-entry
- cfwebstore-url-xss(15454) vdb-entry
- 11112 third-party-advisory