CVEvulnerability
CVE-2005-1162
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp.
Affected configurations
• oneworldstore oneworldstore
References
- http://marc.info/?l=bugtraq&m=111352017704126&w=2 marc.info
- http://secunia.com/advisories/14969 Patch, Vendor Advisory
- http://securitytracker.com/id?1013720 Exploit, Patch
- http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab Vendor Advisory, URL Repurposed
- http://www.osvdb.org/15521 Exploit
- http://www.osvdb.org/15522 Exploit
- http://www.osvdb.org/15523 Exploit
- http://www.securityfocus.com/bid/13184 Exploit, Patch
- http://www.securityfocus.com/bid/13185 Exploit, Patch
- http://www.securityfocus.com/bid/13186 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20096 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=111352017704126&w=2 marc.info
- http://secunia.com/advisories/14969 Patch, Vendor Advisory
- http://securitytracker.com/id?1013720 Exploit, Patch
- http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab Vendor Advisory, URL Repurposed
- http://www.osvdb.org/15521 Exploit
- http://www.osvdb.org/15522 Exploit
- http://www.osvdb.org/15523 Exploit
- http://www.securityfocus.com/bid/13184 Exploit, Patch
- http://www.securityfocus.com/bid/13185 Exploit, Patch
- http://www.securityfocus.com/bid/13186 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20096 exchange.xforce.ibmcloud.com