EUVD-2005-2953

Malware in sbrugna...

MIVA Merchant 5 Merchant.MVC Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14828/info MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

mivaXSS.txt

MIVA Merchant 5 is vulnerable to XSS attack. Users can use javascript to embed their own inputs into the MM5 screens and checkout pages overriding various store safeguards and functions. MIVA Corporation has been very cooperative and has already posted an update to their software entitled core-4...

CVE-2005-2953

Cross-site scripting XSS vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the CustomerLogin parameter...

CVE-2005-2953

CVE-2005-2953 is an XSS vulnerability in MIVA Merchant 5, specifically in merchant.mvc, allowing remote attackers to inject arbitrary script/HTML via the Customer_Login parameter. The description from NVD confirms the affected product and the vulnerable parameter; no remediation details are provi...

CVE-2005-2953

Cross-site scripting XSS vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the CustomerLogin parameter...

XSS Vulnerability in MIVA Merchant 5 - Includes Fix

MIVA Merchant 5 is vulnerable to XSS attack. Users can use javascript to embed their own inputs into the MM5 screens and checkout pages overriding various store safeguards and functions. MIVA Corporation has been very cooperative and has already posted an update to their software entitled core-4...

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting source: https://www.securityfocus.com/bid/14828/info MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue...

MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting

source: https://www.securityfocus.com/bid/14828/info MIVA Merchant 5 is prone to a cross-site scripting vulnerability.This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...

[Full-disclosure] Miva Merchant 4.x Tax Calculation Bypass Vulnerability w/ PoC

Miva Merchant is one of the largest non-free online shopping carts used by bulk web-hosting sites. Miva allows small to medium shops to get online and sell their products without the hassle of learning to code custom scripts that would probably do much more for much less money. All this simplicit...