CVE-2008-6500 Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codetoad asp shopping cart script | All versions | No fix listed |
References
- packetstormsecurity.org exploit
- 32568 exploit vdb-entry
- aspshoppingcartscript-unspecified-xss(47003) vdb-entry