Lucene search

K
nvd[email protected]NVD:CVE-2009-4688
HistoryMar 10, 2010 - 10:30 p.m.

CVE-2009-4688

2010-03-1022:30:00
CWE-79
web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.9%

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.

Affected configurations

Nvd
Node
resalecodephp_shopping_cart_selling_website_script
VendorProductVersionCPE
resalecodephp_shopping_cart_selling_website_script*cpe:2.3:a:resalecode:php_shopping_cart_selling_website_script:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

58.9%

Related for NVD:CVE-2009-4688