Lucene search

MitreCVE-2010-5322

HistoryMar 11, 2015 - 2:59 p.m.

CVE-2010-5322

2015-03-1114:59:00

CWE-79

mitre

web.nvd.nist.gov

cve

2010-5322

cross-site scripting

xss

zeuscart 4.0

security vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

76.7%

JSON

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.

Affected configurations

Nvd

Node

ajsquarezeuscartRange≤4.0

VendorProductVersionCPE
ajsquarezeuscart*cpe:2.3:a:ajsquare:zeuscart:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ajsquare	zeuscart	*	cpe:2.3:a:ajsquare:zeuscart::::::::

References

osvdb.org/show/osvdb/68756

packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.html

seclists.org/fulldisclosure/2015/Feb/89

seclists.org/oss-sec/2015/q1/649

secpod.org/advisories/SECPOD_ZeusCart_XSS.txt

secpod.org/blog/?p=109

sroesemann.blogspot.de/2015/01/sroeadv-2015-12.html

www.exploit-db.com/exploits/36159

www.securityfocus.com/bid/72761

github.com/ZeusCart/zeuscart/issues/28

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.005

Percentile

76.7%

JSON

Related for CVE-2010-5322