CVE-2004-0305 Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parame...
MediumCVSS 6.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webcortex webstores 2000 | = 6.0 | No fix listed |
References
- 20040218 WebCortex Webstores2000 version 6.0 multiple security vulnerabilities mailing-list
- 9693 exploit vdb-entry
- webstores-error-xss(15254) vdb-entry