CVE-2007-4301 - Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 thro

CVE-2007-4301

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://jvn.jp/jp/JVN%2366303599/index.html
http://osvdb.org/36441
http://secunia.com/advisories/26382
http://www.cgis.biz/script_web_cart/notice200708.html
http://www.securityfocus.com/bid/25261
http://www.securitytracker.com/id?1018554
https://exchange.xforce.ibmcloud.com/vulnerabilities/35946

Vulnerable Configurations

cpe:2.3:a:webcart:webcart:2.20:*:*:*:*:*:*:*
cpe:2.3:a:webcart:webcart:2.20:*:*:*:*:*:*:*
cpe:2.3:a:webcart:webcart:2.25:*:*:*:*:*:*:*
cpe:2.3:a:webcart:webcart:2.25:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	25261
confirm	http://www.cgis.biz/script_web_cart/notice200708.html
jvn	JVN#66303599
osvdb	36441
sectrack	1018554
secunia	26382
xf	webcart-unspecified-xss(35946)

Last major update

29-07-2017 - 01:32

Published

13-08-2007 - 19:17

Last modified

29-07-2017 - 01:32