CVE-2004-2411
1.18%V4
2005-08-18
04h00 +00:00
04h00 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
CVE 설명
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use
익스플로잇 정보
Exploit Database EDB-ID : 24198
게시일 : 2004-06-13 22h00 +00:00
저자 : Thomas Ryan
EDB 검증됨 : Yes
언급된 제품
구성 0
Virtual_programming>>Vp-asp >> Version 4.0
Virtual_programming>>Vp-asp >> Version 4.50
Virtual_programming>>Vp-asp >> Version 5.0
참고 자료
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html
Tags : mailing-list, x_refsource_FULLDISC
Tags : mailing-list, x_refsource_FULLDISC
