SPA-Cart eCommerce CMS search cross site scripting
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 5.1epss 60%
da publicação à arma9 dias
Publicada no NVD26 de ago.
1ª PoC+9d
probabilidade de exploração
60%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument filter[brandid]/filter[price] causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version 1.9.1.4 is sufficient to fix this issue. It is advisable to upgrade the affected component.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
SPA-Cart · eCommerce CMSPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/51713não verificadocve_referencepacketstormsecurity.com/files/174343/SPA-Cart-eCommerce-CMS-1.9.0.3-Cross-Site-Scripting.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/174343/SPA-Cart-eCommerce-CMS-1.9.0.3-Cross-Site-Scripting.htmlhttps://codecanyon.net/item/ajax-cart-very-fast-no-page-reloading-many-features-responsive-and-mobile-skin/17109430https://vuldb.com/?ctiid.238058https://vuldb.com/cve/CVE-2023-4547https://vuldb.com/?id.238058https://vuldb.com/submit/197638https://vuldb.com/vuln/238058https://vuldb.com/vuln/238058/ctihttps://www.exploit-db.com/exploits/51713