Vulnerabilities > CVE-2005-0898 - Cross-Site Scripting vulnerability in Magicscripts E-Store Kit-2 Paypal
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE network
magicscripts
Summary
Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |