vendor:
Comersus Cart
by:
blackbeard-sql@hotmail.fr
7.5
CVSS
HIGH
XSS + remote database disclosure
79, 200
CWE
Product Name: Comersus Cart
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Comersus Cart Multiple Exploits (XSS + remote database disclosure)
In simple words, an attacker can exploit the vulnerability by sending a malicious URL to the victim. The malicious URL contains a malicious script which is executed in the victim's browser. The malicious script can be used to steal sensitive information from the victim's browser or to execute malicious code on the victim's machine.
Mitigation:
The vendor should implement proper input validation and sanitization to prevent malicious scripts from being executed.
