Lucene search

K
cvelistMitreCVELIST:CVE-2005-2138
HistoryJul 05, 2005 - 4:00 a.m.

CVE-2005-2138

2005-07-0504:00:00
mitre
www.cve.org
2
cross-site scripting
comdev ecommerce
remote attackers
web script injection

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

59.6%

Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an “A” tag in a review message.

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

59.6%

Related for CVELIST:CVE-2005-2138