Detections
Analytics
Comersus Cart <= 6.0.41 Multiple XSS / SQL Injection
high Nessus Network Monitor Plugin ID 3054
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The installed version of Comersus Cart on the remote host suffers from multiple SQL injection and cross-site scripting flaws due to its failure to sanitize user-supplied input. Attackers may be able to exploit these flaws to influence database queries or cause arbitrary HTML and script code to be executed in users' browsers within the context of the affected site.Solution
Upgrade or patch according to vendor recommendations.See Also
Plugin Details
Severity: High
ID: 3054
Family: CGI
Published: 7/7/2005
Updated: 3/6/2019
Nessus ID: 18643
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 7.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X
Vulnerability Information
CPE: cpe:/a:comersus_open_technologies:comersus_cart