CVE-2005-2138 Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" t...
MediumCVSS 4.3
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in Comdev eCommerce 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the onMouseOver event of an "A" tag in a review message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comdev ecommerce | = 3.0 | No fix listed |
| comdev ecommerce | = 3.1 | No fix listed |
References
- k.domaindlx.com exploit vendor-advisory
- 15865 third-party-advisory vendor-advisory