Unscored CVE-2012-1246 EUVD-2012-1272GHSA-g63g-wvh8-wwm8

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script o…

Published May 15, 2012 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.

References

53539 vdb-entry
JVNDB-2012-000041 third-party-advisory
JVN#47536971 third-party-advisory
http://www.kent-web.com/cart/mart.html
webmart-craftedcookies-xss(75673) vdb-entry