medium5.0Public exploit code
CVE-2001-1212
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Aktivate 1.0 3 - Shopping Cart Cross-Site Scripting2001-12-18 · webapps · cgi · Verified
Impact
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aktivate | Aktivate | Version 1.03 |