QwikSec

Security Database

CVE

CWE

Training

CVE-2008-4121

Published: Oct 21, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in a search.quick action to search.php and (2) the name parameter in a sendtofriend action to sendtofriend.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://cpcommerce.cpradio.org/

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

20081019 Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SREASON

cpcommerce-search-sendtofriend-xss(45970)

vdb-entry

x_refsource_XF

http://www.datensalat.eu/~fabian/cve/CVE-2008-4121-cpcommerce.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.