CVE-2005-1403

State: Published
Severity: Not scored
Published: May 3, 2005
Updated: Aug 7, 2024
Reserved: May 3, 2005

Description

Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

13419vdb-entry
13425vdb-entry
13426vdb-entry
15894vdb-entry
13427vdb-entry
15893vdb-entry
15892vdb-entry
http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html
15155third-party-advisory
1013836vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.