CVE-2004-2411
1.18%V4
2005-08-18
04h00 +00:00
04h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use
漏洞利用信息
Exploit Database EDB-ID : 24198
发布日期 : 2004-06-13 22h00 +00:00
作者 : Thomas Ryan
EDB 已验证 : Yes
相关产品
配置 0
Virtual_programming>>Vp-asp >> Version 4.0
Virtual_programming>>Vp-asp >> Version 4.50
Virtual_programming>>Vp-asp >> Version 5.0
参考资料
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html
Tags : mailing-list, x_refsource_FULLDISC
Tags : mailing-list, x_refsource_FULLDISC
