Description

Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.

Remediation

References

CVE-2003-1219

Related Vulnerabilities

Joomla Configuration Vulnerability (CVE-2008-3228)

WordPress Plugin WooCommerce Security Bypass (5.6.0)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-8450)

YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3783)

WordPress Plugin WP-Polls Cross-Site Scripting (2.69)

Severity

Medium

Classification

CVE-2003-1219

Tags

Missing Update Known Vulnerabilities