McMurtrey/Whitaker & Associates Cart32 2-5 GetLatestBuilds Script Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10617/info Cart32 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a...

CVE-2004-0675

CVE-2004-0675 is a cross-site scripting (XSS) vulnerability in Cart32 shopping cart components cart32.exe and c32web.exe. The flaw allows an attacker to inject arbitrary script via the cart32 parameter to the GetLatestBuilds command, with CVSS v2 base score 6.8 (network, medium complexity, no pri...

CVE-2004-0675: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 cart32.exe or 2 c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command...