Description
Cross-site scripting (XSS) vulnerability in the admin-login panel (admin/index.cgi) in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field (u_name parameter).
Unscored
CVE-2015-2103
EUVD-2015-2213GHSA-36hq-fr9w-frm9
Cross-site scripting (XSS) vulnerability in the admin-login panel (admin/index.cgi) in Cosmoshop allows remote attackers to inject arbitrar…
Published Feb 27, 2015 · Updated Aug 6, 2024 · Assigned by mitre