medium6.8
CVE-2007-1096
Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script or HTML via unspec…
Impact
Cross-site scripting (XSS) vulnerability in ps_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue might overlap CVE-2007-0376.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virtuemart | Virtuemart | through 1.0.8 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/24399
- http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692
- http://www.vupen.com/english/advisories/2007/0817
- http://secunia.com/advisories/24399
- http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/trunk/virtuemart/CHANGELOG.php?revision=692
- http://www.vupen.com/english/advisories/2007/0817