Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the _a parameter in a searchStr action and the (2) Submit parameter.

Remediation

References

CVE-2008-1550

Related Vulnerabilities

WordPress Plugin Membership & Content Restriction-Paid Member Subscriptions Multiple Vulnerabilities (2.4.1)

WordPress Plugin Leaflet Maps Marker Pro (Google Maps, OpenStreetMap, Bing Maps) Multiple Cross-Site Scripting Vulnerabilities (2.3)

WordPress Plugin CM Download Manager Code Injection (2.0.3)

Internet Information Services Other Vulnerability (CVE-2006-6579)

WordPress Plugin Better Font Awesome Cross-Site Request Forgery (2.0.1)

Severity

Medium

Classification

CVE-2008-1550 CWE-707

Tags

Missing Update Known Vulnerabilities