CVE-2010-3465

2010-09-1719:00:00

mitre

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

65.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx.

References

osvdb.org/68029

osvdb.org/68030

pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html

secunia.com/advisories/41453

exchange.xforce.ibmcloud.com/vulnerabilities/61828