Vulnerability Details CVE-2004-0301
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.7%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/10902/
- http://securitytracker.com/alerts/2004/Feb/1009079.html
- http://www.securityfocus.com/bid/9676
- http://www.systemsecure.org/advisories/ssadvisory16022004.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15235
- http://secunia.com/advisories/10902/
- http://securitytracker.com/alerts/2004/Feb/1009079.html
- http://www.securityfocus.com/bid/9676
- http://www.systemsecure.org/advisories/ssadvisory16022004.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15235
Products affected by CVE-2004-0301
-
cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_lite
-
cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_pro
-
cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_standard