CVE-2005-0898

中危 4.3CVE-2005-0898 · Published 26/03/2005 · updated 16/06/2026

要点

CVE-2005-0898 是影响 e-store kit-2 (magicscripts) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：1.0%，高于 64.1% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
e-store kit-2 magicscripts	`= paypal`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter.

References

marc.info
securityfocus.com/bid/12909 · Exploit

e-store kit-2 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free