CVE-2002-0439 | BDVDB-2026-4105 Detail

Description#

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/4270
http://www.securityfocus.com/archive/1/261218
http://www.iss.net/security_center/static/8431.php

Exploit#

No public exploit known

History#

Version 12002-06-11Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.