CVE-2005-0908

State: Published
Severity: Not scored
Published: Mar 29, 2005
Updated: Aug 7, 2024
Reserved: Mar 29, 2005

Description

Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20050327 Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0mailing-list
1013565vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.