CVE-2015-1178

概要

参考情報

• packetstormsecurity.com/files/130061/X-CART-e-Commerce-5.1.8-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/534529/100/0/threaded
• securityfocus.com/bid/72275

x-cart のその他の脆弱性

• CVE-2019-7220中 6.1X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.
• CVE-2017-15285高 8.8X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails …
• CVE-2015-5455中 4.3Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unsp…
• CVE-2015-0951中 6.5X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2)…
• CVE-2015-0950中 4.3Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script …