CVE-2009-4688

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the (1) txtkeywords and (2) cid parameters.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
resalecodephp_shopping_cart_selling_website_script
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt
http://secunia.com/advisories/35894
http://www.vupen.com/english/advisories/2009/1977
http://packetstormsecurity.org/0907-exploits/scsc-sqlxss.txt
http://secunia.com/advisories/35894
http://www.vupen.com/english/advisories/2009/1977