Early Impact : Security Vulnerabilities, CVEs, Published In 2005 (XSS) CVSS score >= 2
Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp.
Max CVSS
4.3
EPSS Score
0.20%
Published
2005-06-08
Updated
2008-09-05
Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart.
Max CVSS
4.3
EPSS Score
0.47%
Published
2005-05-02
Updated
2008-09-05
2 vulnerabilities found