CVE-2015-1178

Multiple cross-site scripting XSS vulnerabilities in cart.php in X-Cart 5.1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 productid or 2 categoryid parameter...

CVE-2015-1178

CVE-2015-1178 affects X-Cart 5.1.8 and earlier. The vulnerability is a cross-site scripting (XSS) in cart.php, exploitable via the product_id and category_id parameters, allowing an attacker to inject arbitrary script into a user’s browser. Multiple connected sources corroborate a reflected XSS i...

X-CART e-Commerce 5.1.8 Cross Site Scripting

CVE-2015-1178-xss-x-cart-ecommerce Information ---------------- Advisory by Octogence. Name: Reflected XSS Vulnerability in X-CART e-Commerce software Affected Software : X-Cart Affected Versions: 5.1.8 and possibly below Vendor Homepage : https://www.x-cart.com Vulnerability Type : Cross-site...