CVEvulnerability
CVE-2005-1403
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie.
References
- http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html Exploit
- http://secunia.com/advisories/15155 Exploit, Vendor Advisory
- http://securitytracker.com/id?1013836 Exploit
- http://www.osvdb.org/15892 www.osvdb.org
- http://www.osvdb.org/15893 www.osvdb.org
- http://www.osvdb.org/15894 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/13419 www.securityfocus.com
- http://www.securityfocus.com/bid/13425 www.securityfocus.com
- http://www.securityfocus.com/bid/13426 www.securityfocus.com
- http://www.securityfocus.com/bid/13427 Exploit
- http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html Exploit
- http://secunia.com/advisories/15155 Exploit, Vendor Advisory
- http://securitytracker.com/id?1013836 Exploit
- http://www.osvdb.org/15892 www.osvdb.org
- http://www.osvdb.org/15893 www.osvdb.org
- http://www.osvdb.org/15894 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/13419 www.securityfocus.com
- http://www.securityfocus.com/bid/13425 www.securityfocus.com
- http://www.securityfocus.com/bid/13426 www.securityfocus.com
- http://www.securityfocus.com/bid/13427 Exploit