CVEvulnerability
CVE-2010-4631
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-12-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the specific parameter to (4) quote.asp and (5) buyitnow.
Affected configurations
• pilotcart pilot cart 7.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html Exploit
- http://marc.info/?l=full-disclosure&m=128913521908405&w=2 Exploit
- http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt packetstormsecurity.org
- http://secunia.com/advisories/30176 Vendor Advisory
- http://www.exploit-db.com/exploits/15448 Exploit
- http://www.securityfocus.com/bid/44698 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63053 exchange.xforce.ibmcloud.com
- http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html Exploit
- http://marc.info/?l=full-disclosure&m=128913521908405&w=2 Exploit
- http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt packetstormsecurity.org
- http://secunia.com/advisories/30176 Vendor Advisory
- http://www.exploit-db.com/exploits/15448 Exploit
- http://www.securityfocus.com/bid/44698 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63053 exchange.xforce.ibmcloud.com