JpcertCVE-2015-0882CVE-2015-0882
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
49.5%
Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to admin/includes/init_includes/init_sanitize.php and includes/init_includes/init_sanitize.php.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zen-cart | zen_cart | 1.3.0.0 | cpe:2.3:a:zen-cart:zen_cart:1.3.0.0:*:*:ja:*:*:*:* |
| zen-cart | zen_cart | 1.3.0.1 | cpe:2.3:a:zen-cart:zen_cart:1.3.0.1:*:*:ja:*:*:*:* |
| zen-cart | zen_cart | 1.3.0.2 | cpe:2.3:a:zen-cart:zen_cart:1.3.0.2:*:*:ja:*:*:*:* |
| zen-cart | zen_cart | 1.5.0 | cpe:2.3:a:zen-cart:zen_cart:1.5.0:*:*:ja:*:*:*:* |
| zen-cart | zen_cart | 1.5.1 | cpe:2.3:a:zen-cart:zen_cart:1.5.1:*:*:ja:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
49.5%