Lucene search

K
cveMitreCVE-2004-0301
HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0301

2004-11-2305:00:00
mitre
web.nvd.nist.gov
26
cve-2004-0301
cross-site scripting
xss
more.php
online store kit 3.0
vulnerability
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.025

Percentile

90.2%

Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.

Affected configurations

Nvd
Node
ecommerce_corporation_onlinestore_kitMatch3.0_lite
OR
ecommerce_corporation_onlinestore_kitMatch3.0_pro
OR
ecommerce_corporation_onlinestore_kitMatch3.0_standard
VendorProductVersionCPE
ecommerce_corporation_onlinestore_kit3.0_litecpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_lite:*:*:*:*:*:*:*
ecommerce_corporation_onlinestore_kit3.0_procpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_pro:*:*:*:*:*:*:*
ecommerce_corporation_onlinestore_kit3.0_standardcpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_standard:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

High

EPSS

0.025

Percentile

90.2%

Related for CVE-2004-0301