CVE-2004-1882 - Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attac

CVE-2004-1882

Summary

Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter.

References

Vulnerable Configurations

cpe:2.3:a:cactusoft:cactushop:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cactusoft:cactushop:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cactusoft:cactushop:5.1:*:*:*:*:*:*:*
cpe:2.3:a:cactusoft:cactushop:5.1:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	10020
bugtraq	20040331 CactuSoft CactuShop v5.x shopping cart software multiple security
fulldisc	2004031 CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities
osvdb	4787
sectrack	1009601
secunia	11272
xf	cactushop-popularlargeimageasp-xss(15687)

Last major update

11-07-2017 - 01:31

Published

31-12-2004 - 05:00

Last modified

11-07-2017 - 01:31