Description
Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review message.
Unscored
CVE-2005-2138
EUVD-2005-2139GHSA-2q83-hhgc-9wfr
Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web scrip…
Published Jul 5, 2005 · Updated Sep 16, 2024 · Assigned by mitre