CVE-2007-6646 Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parame...
MediumCVSS 4.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via (1) the return parameter to user/remindPassword, (2) the q parameter to the category script, (3) the return parameter to the order script, or (4) the email parameter to user/remindComplete.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| integry systems livecart | = 1.0.1 | No fix listed |
References
- 20080201 LiveCart XSS vulnerability fixed since version 1.1.0 mailing-list
- livecart.com
- 39756 vdb-entry
- 39757 vdb-entry
- 39758 vdb-entry
- 28017 third-party-advisory vendor-advisory
- 3512 third-party-advisory
- www.hackerscenter.com exploit
- 20071230 LiveCart Multiple Cross-Site Scripting Vulnerabilities mailing-list
- 27087 exploit vdb-entry
- 1019151 vdb-entry
- livecart-multiple-xss(39305) vdb-entry