Unscored CVE-2007-2968 EUVD-2007-2960GHSA-9377-22wr-749v

Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web sc…

Published Jun 1, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field).

References

36697 vdb-entry
24166 vdb-entry
cpcommerce-fullname-xss(34517) vdb-entry
25424 third-party-advisory
2761 third-party-advisory
20070525 Vulnerability - cpCommerce - XSS mailing-list