CVE-2007-3448

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the msgs parameter. NOTE: 4.0.2 and other versions might also be affected.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4103unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38205 http://secunia.com/advisories/25836 https://exchange.xforce.ibmcloud.com/vulnerabilities/35037 https://www.exploit-db.com/exploits/4103 http://www.h4cky0u.org/viewtopic.php?t=26834 http://www.securityfocus.com/bid/24629 http://www.vupen.com/english/advisories/2007/2322