CVE-2010-5322
published 2015-03-11CVE-2010-5322: Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
2.56%
83.2th percentile
Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ajsquare | zeuscart | <= 4.0 | — |
| ajsquare | zeuscart | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wvj7-73j3-j4p2: Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr par
ghsa_unreviewed·2022-05-17·CVSS 4.3
CVE-2015-2182 [MEDIUM] CWE-79 GHSA-wvj7-73j3-j4p2: Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr par
Multiple cross-site scripting (XSS) vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the (1) schltr parameter in a brands action or (2) brand parameter in a viewbrands action to index.php. NOTE: The search parameter vector is already covered by CVE-2010-5322.
GHSA
GHSA-gqfg-cx7w-hg3x: Cross-site scripting (XSS) vulnerability in ZeusCart 4
ghsa_unreviewed·2022-05-17
CVE-2010-5322 [MEDIUM] CWE-79 GHSA-gqfg-cx7w-hg3x: Cross-site scripting (XSS) vulnerability in ZeusCart 4
Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/show/osvdb/68756http://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.htmlhttp://seclists.org/fulldisclosure/2015/Feb/89http://seclists.org/oss-sec/2015/q1/649http://secpod.org/advisories/SECPOD_ZeusCart_XSS.txthttp://secpod.org/blog/?p=109http://sroesemann.blogspot.de/2015/01/sroeadv-2015-12.htmlhttp://www.exploit-db.com/exploits/36159http://www.securityfocus.com/bid/72761https://github.com/ZeusCart/zeuscart/issues/28http://osvdb.org/show/osvdb/68756http://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.htmlhttp://seclists.org/fulldisclosure/2015/Feb/89http://seclists.org/oss-sec/2015/q1/649http://secpod.org/advisories/SECPOD_ZeusCart_XSS.txthttp://secpod.org/blog/?p=109http://sroesemann.blogspot.de/2015/01/sroeadv-2015-12.htmlhttp://www.exploit-db.com/exploits/36159http://www.securityfocus.com/bid/72761https://github.com/ZeusCart/zeuscart/issues/28
2015-03-11
Published