vendor:
PHPMyCart
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting and Authentication Bypass
79, 287
CWE
Product Name: PHPMyCart
Affected Version From: 1.3
Affected Version To: 1.3
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Conkurent PHPMyCart Cross-Site Scripting and Authentication Bypass Vulnerabilities
Conkurent PHPMyCart is prone to a cross-site scripting vulnerability and an authentication-bypass vulnerability. An attacker may leverage these issues to gain unauthorized access to the affected application and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Mitigation:
Users should apply the latest available updates to the affected application.
