CVE-2005-2386

Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2005-07-27

Last modified

2024-09-16

Affected products

• Cartwiz (Elemental Software)

References

• http://www.hackerscenter.com/archive/view.asp?id=4008
• http://www.securityfocus.com/bid/14386