CVE-2004-2411
1.18%V4
2005-08-18
04h00 +00:00
04h00 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use
漏洞利用資訊
Exploit Database EDB-ID : 24198
發布日期 : 2004-06-13 22h00 +00:00
作者 : Thomas Ryan
EDB 已驗證 : Yes
相關產品
設定 0
Virtual_programming>>Vp-asp >> Version 4.0
Virtual_programming>>Vp-asp >> Version 4.50
Virtual_programming>>Vp-asp >> Version 5.0
參考資料
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html
Tags : mailing-list, x_refsource_FULLDISC
Tags : mailing-list, x_refsource_FULLDISC
