CubeCart links Array XSS

2006-08-28T03:34:01
ID OSVDB:28279
Type osvdb
Reporter OSVDB
Modified 2006-08-28T03:34:01

Description

Technical Description

This vulnerability is only present when the register_globals PHP option is set to 'on'. This has not been the default setting for PHP installs since version 4.2.0 (22-Apr-2002).

References:

Vendor URL: http://www.cubecart.com/ Secunia Advisory ID:21659 Related OSVDB ID: 28281 Related OSVDB ID: 28280 Other Advisory URL: http://www.gulftech.org/?node=research&article_id=00111-08282006& CVE-2006-4525 Bugtraq ID: 19782