CVE-2008-1906

EPSS 1.7%

Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5437unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugreport.ir/index.php?/34 http://secunia.com/advisories/29807 https://exchange.xforce.ibmcloud.com/vulnerabilities/41780 https://www.exploit-db.com/exploits/5437 http://www.securityfocus.com/bid/28755 http://www.vupen.com/english/advisories/2008/1213/references