CVE-2005-1502

2005-05-1104:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.073 Low

EPSS

Percentile

94.1%

JSON

Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php.

References

marc.info/?l=bugtraq&m=111533057918993&w=2

secunia.com/advisories/15269

www.hackgen.org/advisories/hackgen-2005-004.txt

www.osvdb.org/16173

www.osvdb.org/16174

www.securityfocus.com/bid/13516

www.securityfocus.com/bid/13517

www.securityfocus.com/bid/13518

exchange.xforce.ibmcloud.com/vulnerabilities/20427