Description

Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.

Remediation

References

CVE-2003-1219

Related Vulnerabilities

OpenSSL Improper Input Validation Vulnerability (CVE-2014-3513)

WordPress Plugin Simple Social Media Share Buttons-Social Sharing for Everyone Cross-Site Scripting (3.1.1)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-3011)

WordPress Plugin Broken Link Manager SQL Injection (0.6.5)

Grafana CVE-2023-4399 Vulnerability (CVE-2023-4399)

Severity

Medium

Classification

CVE-2003-1219

Tags

Missing Update Known Vulnerabilities