CVE-2007-2804

CVE-2007-2804

EPSS 1.2%

Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) brand and (2) Msg parameters.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36234 http://pridels-team.blogspot.com/2007/05/candypress-store-xss-vuln.html http://secunia.com/advisories/25370 https://exchange.xforce.ibmcloud.com/vulnerabilities/34389 http://www.securityfocus.com/bid/24069 http://www.vupen.com/english/advisories/2007/1881