CVE-2008-6500
published 2009-03-20CVE-2008-6500: Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.44%
70.0th percentile
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_cisco7.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2w7r-9m4h-c58p: Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the q
ghsa_unreviewed·2022-05-17
CVE-2008-6500 [MEDIUM] CWE-79 GHSA-2w7r-9m4h-c58p: Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the q
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
Cisco
Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720
vendor_cisco·2008-03-26·CVSS 7.8
CVE-2008-0537 [HIGH] CWE-399 Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720
Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720
Certain Cisco Catalyst 6500 Series and Cisco 7600 Router devices that
run branches of Cisco IOS based on 12.2 can be vulnerable to a denial of
service vulnerability that can prevent any traffic from entering an affected
interface. For a device to be vulnerable, it must be configured for Open
Shortest Path First (OSPF) Sham-Link and Multi Protocol Label Switching (MPLS)
Virtual Private Networking (VPN). This vulnerability only affects Cisco
Catalyst 6500 Series or Catalyst 7600 Series devices with the Supervisor Engine
32 (Sup32), Supervisor Engine 720 (Sup720) or Route Switch Processor 720
(RSP720) modules. The Supervisor 32, Supervisor 720, Supervisor 720-3B,
Supervisor 720-
No detection rules found.
http://packetstormsecurity.org/0812-exploits/aspshoppingcart-xss.txthttp://www.securityfocus.com/bid/32568https://exchange.xforce.ibmcloud.com/vulnerabilities/47003http://packetstormsecurity.org/0812-exploits/aspshoppingcart-xss.txthttp://www.securityfocus.com/bid/32568https://exchange.xforce.ibmcloud.com/vulnerabilities/47003
2009-03-20
Published