Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the _a parameter in a searchStr action and the (2) Submit parameter.

Remediation

References

CVE-2008-1550

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7983)

WordPress Plugin WP PHP widget Information Disclosure (1.0.2)

MyBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2017-7566)

WordPress Plugin Appointment Hour Booking-WordPress Booking Cross-Site Scripting (1.3.15)

WordPress Plugin WPJobBoard Cross-Site Scripting (5.5.3)

Severity

Medium

Classification

CVE-2008-1550 CWE-707

Tags

Missing Update Known Vulnerabilities