Unscored CVE-2005-1292 EUVD-2005-1295GHSA-2xr2-2545-997q

Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via t…

Published Apr 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWishlist.asp, redirect parameter to (3) access.asp or (4) login.asp, message parameter to (5) login.asp or (6) error.asp, or (7) sku or (8) name parameter to searchResults.asp.

References

1013792 vdb-entry
15776 vdb-entry
15777 vdb-entry
15778 vdb-entry
20050423 Multiple Sql injection and XSS in CartWIZ ASP Cart mailing-list
cartwiz-multiple-script-xss(20249) vdb-entry
15775 vdb-entry
15055 third-party-advisory
15780 vdb-entry