Vulnerabilities > CVE-2005-3685 - HTML Injection vulnerability in Virtual Programming Vp-Asp 5.50

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
virtual-programming
exploit available
NVD
Published: 2005-11-19
Updated: 2011-03-08

Summary

Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.

Vulnerable Configurations

Part Description Count
Application
Virtual_Programming
1

Exploit-Db

descriptionVP-ASP Shopping Cart Shopadmin.ASP HTML Injection Vulnerability. CVE-2005-3685. Webapps exploit for asp platform
idEDB-ID:26537
last seen2016-02-03
modified2005-11-17
published2005-11-17
reporterConcorDHacK
sourcehttps://www.exploit-db.com/download/26537/
titleVP-ASP Shopping Cart Shopadmin.ASP HTML Injection Vulnerability

References