CVE-2010-1486
22.04.2010, 14:30
Multiple cross-site scripting (XSS) vulnerabilities in _invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the (1) billing address or (2) shipping address.
| Vendor | Product | Version |
|---|---|---|
| cactushop | cactushop | 𝑥 ≤ 6.1 |
| cactushop | cactushop | 4.1 |
| cactushop | cactushop | 4.5 |
| cactushop | cactushop | 4.6 |
| cactushop | cactushop | 4.7 |
| cactushop | cactushop | 5.0 |
| cactushop | cactushop | 5.1 |
𝑥
= Vulnerable software versions