2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...
4.3CVSS6.1AI score0.00845EPSS
SaveExploits0References2Affected Software1
CVE-2008-0558: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script or HTML via the rp parameter to cartView.asp and unspecified other components. NOTE: the provenance of this information is unknown; the details are obtained...
4.3CVSS6AI score0.00845EPSS
SaveExploits0References2
20