CVE-2007-2968

CVE-2007-2968

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field).

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36697 http://secunia.com/advisories/25424 http://securityreason.com/securityalert/2761 https://exchange.xforce.ibmcloud.com/vulnerabilities/34517 http://www.securityfocus.com/archive/1/469595/100/0/threaded http://www.securityfocus.com/bid/24166