CVE-2007-1096

Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue might overlap CVE-2007-0376.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-02-26

Last modified

2024-08-07

Affected products

• Virtuemart (Virtuemart)

References

• http://secunia.com/advisories/24399
• http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692
• http://www.vupen.com/english/advisories/2007/0817