CVE-2005-3736 | BDVDB-2026-13465 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/20996
http://securitytracker.com/id?1015244
http://www.osvdb.org/20994
http://www.osvdb.org/20995
http://www.osvdb.org/20993

Exploit#

No public exploit known

History#

Version 12005-11-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.