Vulnerability Details CVE-2008-6503
Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/login.php and (2) order.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.3%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/archive/1/498994/100/100/threaded
- http://www.securityfocus.com/bid/32689
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47158
- http://www.securityfocus.com/archive/1/498994/100/100/threaded
- http://www.securityfocus.com/bid/32689
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47158
Products affected by CVE-2008-6503
-
cpe:2.3:a:prestashop:prestashop:1.1.0.3