Skip to content
OpenAdvisories
Unscored CVE-2010-1541 EUVD-2010-1568GHSA-r9fq-c7w8-m693

Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web sc…

Published Apr 26, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity parameters to index.php, and the (3) category parameter to your.order.php.

References