CVE-2012-0311

Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2012-01-26

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Oscommerce (Oscommerce)

References

• http://jvn.jp/en/jp/JVN36559450/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000004
• http://sourceforge.jp/forum/forum.php?forum_id=28119