Nessus Plugin #11437

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

osCommerce Cross Site Scripting Bugs

Family:

CGI abuses : XSS

Category:

infos

Copyright:

This script is Copyright (C) 2003 k-otik.com

Summary:

Determine if osCommerce is vulnerable to xss attack

Version:

$Revision: 1.10 $

Cve_id:

-

Bugtraq_id:

7151, 7153, 7155, 7156, 7158

Xrefs:

-

Description:

osCommerce is a widely installed open source shopping e-commerce solution.
An attacker may use it to perform a cross site scripting attack on
this host.

Solution : Upgrade to a newer version.
Risk factor : Medium