CVE-2005-1440

State: Published
Severity: Not scored
Published: May 3, 2005
Updated: Sep 17, 2024
Reserved: May 3, 2005

Description

Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) various parameters to basket.php, (2) the nickname, email, topic, and message fields in forum.php, as demonstrated using forum_new_thread.php and forum_thread.php, (3) the page parameter to page.php, (4) category_id and item_id parameters to reviews.php, (5) the category_id parameter to product_details.php, (6) the category_id or search_string parameters to products.php, or (7) the rp or page parameters to news_view.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

13462vdb-entry
15958vdb-entry
1013853vdb-entry
15955vdb-entry
15953vdb-entry
http://lostmon.blogspot.com/2005/04/viart-shop-enterprise-multiple.html
15954vdb-entry
15181third-party-advisory
15952vdb-entry
15957vdb-entry
15951vdb-entry
15956vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.