Lucene search
MitreCVE-2005-2191HistoryJul 11, 2005 - 4:00 a.m.
CVE-2005-2191
2005-07-1104:00:00
mitre
web.nvd.nist.gov
28
cve-2005-2191
xss
vulnerabilities
comersus shopping cart
web script
html
remote attackers
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.003
Percentile
68.7%
Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to comersus_backoffice_listAssignedPricesToCustomer.asp or (2) message parameter to comersus_backoffice_message.asp.
Affected configurations
Node
comersus_open_technologiescomersus_cart
| Vendor | Product | Version | CPE |
|---|---|---|---|
| comersus_open_technologies | comersus_cart | * | cpe:2.3:a:comersus_open_technologies:comersus_cart:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2005-2191
2005-07-11 04:00:00
CVE-2005-3397
2005-11-01 12:47:00
cvelist
cvelist
CVE-2005-2191
2005-07-10 04:00:00
CVE-2005-3397
2005-11-01 11:00:00
cve
cve
CVE-2005-3397
2005-11-01 12:47:00
nessus
nessus
Comersus Cart Multiple Vulnerabilities (SQLi, XSS)
2005-07-08 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.003
Percentile
68.7%
Related for CVE-2005-2191