CVE-2005-1486

Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2)…

published May 11, 2005

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php. NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed. The original researcher is known to be unreliable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03992 · 90.5th percentile
Published
2005-05-11T04:00Z
EPSS history
Timeline
  • 11 MAY 04:00Z
    Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2)…
    cvelistv5