Lucene search

[email protected]CVE-2002-0553

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0553

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0553

sunshop 2.5

cross-site scripting

remote attackers

customer registration

administrative privileges

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.

Affected configurations

NVD

Node

turnkey_solutionssunshop_shopping_cartMatch1.5

turnkey_solutionssunshop_shopping_cartMatch2.0

turnkey_solutionssunshop_shopping_cartMatch2.1

turnkey_solutionssunshop_shopping_cartMatch2.2

turnkey_solutionssunshop_shopping_cartMatch2.4

turnkey_solutionssunshop_shopping_cartMatch2.5

CPENameOperatorVersion
turnkey_solutions:sunshop_shopping_cartturnkey solutions sunshop shopping carteq1.5
turnkey_solutions:sunshop_shopping_cartturnkey solutions sunshop shopping carteq2.0
turnkey_solutions:sunshop_shopping_cartturnkey solutions sunshop shopping carteq2.1
turnkey_solutions:sunshop_shopping_cartturnkey solutions sunshop shopping carteq2.2
turnkey_solutions:sunshop_shopping_cartturnkey solutions sunshop shopping carteq2.4
turnkey_solutions:sunshop_shopping_cartturnkey solutions sunshop shopping carteq2.5

CPE	Name	Operator	Version
turnkey_solutions:sunshop_shopping_cart	turnkey solutions sunshop shopping cart	eq	1.5
turnkey_solutions:sunshop_shopping_cart	turnkey solutions sunshop shopping cart	eq	2.0
turnkey_solutions:sunshop_shopping_cart	turnkey solutions sunshop shopping cart	eq	2.1
turnkey_solutions:sunshop_shopping_cart	turnkey solutions sunshop shopping cart	eq	2.2
turnkey_solutions:sunshop_shopping_cart	turnkey solutions sunshop shopping cart	eq	2.4
turnkey_solutions:sunshop_shopping_cart	turnkey solutions sunshop shopping cart	eq	2.5

References

archives.neohapsis.com/archives/bugtraq/2002-04/0154.html

www.iss.net/security_center/static/8840.php

www.securityfocus.com/bid/4506

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

Related for CVE-2002-0553

cvelist1 nvd1