952 matches found
EUVD-2012-1096
Cross-site scripting XSS vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the valuetitle parameter, as demonstrated using the "Front" field in the shirt module...
PT-2012-3048
Name of the Vulnerable Software and Affected Versions OSCommerce Online Merchant version 3.0.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the value title parameter. This can be demonstrated using the "Front" field in the shirt...
CVE-2012-1059
Cross-site scripting XSS vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the valuetitle parameter, as demonstrated using the "Front" field in the shirt module...
CVE-2012-1059
CVE-2012-1059 describes a Cross-site scripting (XSS) vulnerability in OSCommerce Online Merchant 3.0.2. The issue affects the cart component at OSCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php where user-supplied input in the value_title parameter can be echoed back to the page, allow...
CVE-2012-1059
Cross-site scripting XSS vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the valuetitle parameter, as demonstrated using the "Front" field in the shirt module...
CVE-2012-1059: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce Online Merchant 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the valuetitle parameter, as demonstrated using the "Front" field in the shirt module...
OSCommerce 3.0.2 Cross Site Scripting
Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Public License. It features a rich set o...
osCommerce 3.0.2 - Persistent Cross-Site Scripting
osCommerce 3.0.2 - Persistent Cross-Site Scripting Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the G...
osCommerce 3.0.2 - Persistent Cross-Site Scripting
Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Public License. It features a rich set o...
OSCommerce v3.0.2 - Persistent Cross Site Vulnerability
Document Title: =============== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020057 ID: CNNVD-201202-057 Release Date: ============= 2012-02-01 Vulnerability Laboratory ID VL-ID:...
OSCommerce v3.0.2 - Persistent Cross Site Vulnerability
Document Title: =============== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020057 ID: CNNVD-201202-057 Release Date: ============= 2012-02-01 Vulnerability Laboratory ID VL-ID:...
CVE-2012-0311
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0312
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0312
CVE-2012-0312 affects osCommerce: XSS in osCommerce 2.2MS1J before R9 and osCommerce Online Merchant before 2.3.1 allows remote attackers to inject arbitrary scripts/HTML via unspecified vectors. Documented impact is execution of script in the user’s browser; no exploitation details are provided ...
CVE-2012-0312
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0311
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-0311
The CVE refers to an XSS vulnerability in osCommerce 2.2MS1J before R9, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors and potentially execute scripts in a user’s browser. Connected documents confirm affected product/version (osCommerce 2.2 MS1 Japanese version ...
CVE-2012-0311: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...