CVE-2008-3935 Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| d-ic shop v50 | <= 3.0 | No fix listed |
| d-ic shop v52 | <= 2.0 | No fix listed |
References
- JVN#79914432 third-party-advisory
- 31652 third-party-advisory vendor-advisory
- www.d-ic.com patch
- www.d-ic.com patch
- 31006 vdb-entry