Lucene search
+L

9 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•21 views

MIVA Merchant 5 Merchant.MVC Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14828/info MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2005/09/22 12:00 a.m.•55 views

mivaXSS.txt

MIVA Merchant 5 is vulnerable to XSS attack. Users can use javascript to embed their own inputs into the MM5 screens and checkout pages overriding various store safeguards and functions. MIVA Corporation has been very cooperative and has already posted an update to their software entitled core-4...

7.4AI score
SaveExploits0
NVD
NVD
•added 2005/09/16 10:03 p.m.•20 views

CVE-2005-2953

Cross-site scripting XSS vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the CustomerLogin parameter...

4.3CVSS5.7AI score0.01733EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2005/09/16 4:00 a.m.•29 views

CVE-2005-2953

Cross-site scripting XSS vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the CustomerLogin parameter...

5.7AI score0.01733EPSS
SaveExploits2References3
CVE
CVE
•added 2005/09/16 4:00 a.m.•67 views

CVE-2005-2953

CVE-2005-2953 is an XSS vulnerability in MIVA Merchant 5, specifically in merchant.mvc, allowing remote attackers to inject arbitrary script/HTML via the Customer_Login parameter. The description from NVD confirms the affected product and the vulnerable parameter; no remediation details are provi...

4.3CVSS6AI score0.01733EPSS
SaveExploits2References3Affected Software1
securityvulns
securityvulns
•added 2005/09/16 12:00 a.m.•41 views

XSS Vulnerability in MIVA Merchant 5 - Includes Fix

MIVA Merchant 5 is vulnerable to XSS attack. Users can use javascript to embed their own inputs into the MM5 screens and checkout pages overriding various store safeguards and functions. MIVA Corporation has been very cooperative and has already posted an update to their software entitled core-4...

0.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/16 12:00 a.m.•4 views

CVE-2005-2953: Undefined Security Weakness

Cross-site scripting XSS vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the CustomerLogin parameter...

4.3CVSS6AI score0.01733EPSS
SaveExploits2References1
exploitpack
exploitpack
•added 2005/09/14 12:00 a.m.•15 views

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting source: https://www.securityfocus.com/bid/14828/info MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2005/09/14 12:00 a.m.•32 views

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting

source: https://www.securityfocus.com/bid/14828/info MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...

4.3CVSS5.8AI score0.01733EPSS
SaveExploits2
Rows per page
Query Builder