Security Advisory

CVE-2004-0681

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-07-13 04:00:00
Last updated 2024-08-08 00:24:27
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter.