medium4.3
CVE-2012-0312
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitr…
Impact
Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oscommerce | Online Merchant | through 2.3.0 Version 2.2 |
| Oscommerce | Oscommerce | Versions 2.2ms1j-r1, 2.2ms1j-r2, 2.2ms1j-r3, 2.2ms1j-r4, 2.2ms1j-r5, 2.2ms1j-r6a |