cbcvebase.
CVE-2005-0908
published 2005-03-28

CVE-2005-0908: Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the…

PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.00%
58.6th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php.

Affected

1 ranges
VendorProductVersion rangeFixed in
valdersoftvaldersoft_shopping_cart——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.