CVE-2007-2968

CVE-2007-2968

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field).

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/36697 http://secunia.com/advisories/25424 http://securityreason.com/securityalert/2761 https://exchange.xforce.ibmcloud.com/vulnerabilities/34517 http://www.securityfocus.com/archive/1/469595/100/0/threaded http://www.securityfocus.com/bid/24166