Lucene search
Japan Vulnerability NotesJVN:79914432HistorySep 03, 2008 - 12:00 a.m.
JVN#79914432 Webservice-DIC shop_v50 and shop_v52 vulnerable to cross-site scripting
2008-09-0300:00:00
Japan Vulnerability Notes
jvn.jp
16
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
65.5%
Webservice-DIC shop_v50 and shop_v52 are shopping cart software. shop_v50 and shop_v52 contain a cross-site scripting vulnerability.
Impact
This vulnerability can be exploited to conduct a cross-site scripting attack by an attacker.
Solution
Update the Software
Administrators of the websites which uses affected products should immediately apply the latest updates provided by the vendor.
Products Affected
- shop_v50 version 3.0 and earlier
- shop_v52 version 2.0 and earlier
Related
cve
cve
CVE-2008-3935
2008-09-05 15:08:00
cvelist
cvelist
CVE-2008-3935
2008-09-05 15:00:00
prion
prion
Cross site scripting
2008-09-05 15:08:00
nvd
nvd
CVE-2008-3935
2008-09-05 15:08:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
65.5%
Related for JVN:79914432