CVE-2007-2968

CVE-2007-2968

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter (Full Name field).

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://osvdb.org/36697 http://secunia.com/advisories/25424 http://securityreason.com/securityalert/2761 https://exchange.xforce.ibmcloud.com/vulnerabilities/34517 http://www.securityfocus.com/archive/1/469595/100/0/threaded http://www.securityfocus.com/bid/24166