CVE-2005-1188

MEDIUM 4.3CVE-2005-1188 · Published 02/05/2005 · updated 16/06/2026

In short

CVE-2005-1188 is a MEDIUM (CVSS 4.3) vulnerability affecting comersus cart (comersus open technologies).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
comersus cart comersus_open_technologies	`= 3.90= 4.00= 4.051= 4.14= 4.20b= 4.23= 4.27= 4.28= 4.29= 4.36= 4.47`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

References

lostmon.blogspot.com/2005/04/comersus-asp-shopping-cart-variable.html · Exploit
securitytracker.com/id · Exploit
osvdb.org/15539
securityfocus.com/bid/13125 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/20147

More vulnerabilities in comersus cart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

comersus cart

comersus_open_technologies

= 3.90= 4.00= 4.051= 4.14= 4.20b= 4.23= 4.27= 4.28= 4.29= 4.36= 4.47

No fix yet

More vulnerabilities in comersus cart

See all →