Vulnerability Details CVE-2008-3130
Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenCart 0.7.7 allow remote attackers to inject arbitrary web script or HTML via the (1) firstname and (2) search parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/30177
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43505
- http://secunia.com/advisories/30177
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43505
Products affected by CVE-2008-3130
-
cpe:2.3:a:simple_machines:opencart:0.7.7