CVEvulnerability
CVE-2010-3465
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to Default.aspx and the (2) type parameter to SearchResults.aspx.
Affected configurations
• ecommercesoft xse shopping cart 1.5.2.1
• ecommercesoft xse shopping cart 1.5.3.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/68029 osvdb.org
- http://osvdb.org/68030 osvdb.org
- http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html pridels-team.blogspot.com
- http://secunia.com/advisories/41453 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61828 exchange.xforce.ibmcloud.com
- http://osvdb.org/68029 osvdb.org
- http://osvdb.org/68030 osvdb.org
- http://pridels-team.blogspot.com/2010/09/xse-shopping-cart-xss-vuln.html pridels-team.blogspot.com
- http://secunia.com/advisories/41453 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61828 exchange.xforce.ibmcloud.com