Vulnerabilities > CVE-2003-1219 - Unspecified vulnerability in Oscommerce

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
oscommerce
exploit available
NVD
Published: 2003-12-31
Updated: 2023-11-07

Summary

Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3 allows remote attackers to inject arbitrary web script or HTML via the osCsid parameter.

Vulnerable Configurations

Part Description Count
Application
Oscommerce
31

Exploit-Db

descriptionosCommerce 2.2 osCsid Parameter Cross-Site Scripting Vulnerability. CVE-2003-1219. Webapps exploit for php platform
idEDB-ID:23445
last seen2016-02-02
modified2003-12-17
published2003-12-17
reporterJeiAr
sourcehttps://www.exploit-db.com/download/23445/
titleosCommerce 2.2 osCsid Parameter Cross-Site Scripting Vulnerability

References