medium4.3Public exploit code
CVE-2005-2953
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Log…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MIVA Merchant 5 - Merchant.MVC Cross-Site Scripting2005-09-14 · webapps · cgi · Verified
Impact
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML via the Customer_Login parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Miva | Miva Merchant | Version 5.0 |