CVE-2010-1541
published 2010-04-26CVE-2010-1541: Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the…
PriorityP414medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.06%
60.5th percentile
Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity parameters to index.php, and the (3) category parameter to your.order.php.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dragonfrugal | dfd_cart | <= 1.198 | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
| dragonfrugal | dfd_cart | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://holisticinfosec.org/content/view/135/45/http://osvdb.org/62671http://osvdb.org/62672http://secunia.com/advisories/38635http://www.securityfocus.com/bid/38505http://holisticinfosec.org/content/view/135/45/http://osvdb.org/62671http://osvdb.org/62672http://secunia.com/advisories/38635http://www.securityfocus.com/bid/38505
2010-04-26
Published