CVE-2009-4688

EUVD-2009-4652
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
resalecodephp_shopping_cart_selling_website_script
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt
http://secunia.com/advisories/35894
http://www.vupen.com/english/advisories/2009/1977
http://packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt
http://secunia.com/advisories/35894
http://www.vupen.com/english/advisories/2009/1977