medium6.8Public exploit code
CVE-2004-0305
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and st…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebCortex WebStores2000 - 'error.asp' Cross-Site Scripting2004-02-18 · webapps · asp · Verified
Impact
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webcortex | Webstores 2000 | Version 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107712159425226&w=2
- http://www.securityfocus.com/bid/9693
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15254
- http://marc.info/?l=bugtraq&m=107712159425226&w=2
- http://www.securityfocus.com/bid/9693
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15254