CVEvulnerability

CVE-2005-4314

4.3 MEDIUM Published 2005-12-17 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-17
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) stop and (2) user parameters.

Affected configurations

• ppcal shopping cart ppcal shopping cart (<= 3.3.0)

References

http://pridels0.blogspot.com/2005/12/ppcal-shopping-cart-xss.html pridels0.blogspot.com
http://secunia.com/advisories/18032 Vendor Advisory
http://www.securityfocus.com/bid/15892 Exploit
http://www.vupen.com/english/advisories/2005/2918 www.vupen.com
http://pridels0.blogspot.com/2005/12/ppcal-shopping-cart-xss.html pridels0.blogspot.com
http://secunia.com/advisories/18032 Vendor Advisory
http://www.securityfocus.com/bid/15892 Exploit
http://www.vupen.com/english/advisories/2005/2918 www.vupen.com