ID de Prueba:	1.3.6.1.4.1.25623.1.0.12290
Categoría:	Web application abuses
Título:	Cart32 GetLatestBuilds XSS
Resumen:	The remote host is using Cart32, a shopping cart software.;; There is a bug in this software which makes it vulnerable to cross site; scripting attacks.
Descripción:	Summary: The remote host is using Cart32, a shopping cart software. There is a bug in this software which makes it vulnerable to cross site scripting attacks. Vulnerability Impact: An attacker may use this bug to steal the credentials of the legitimate users of this site. Solution: Upgrade to the newest version of this software CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0675 BugTraq ID: 10617 http://www.securityfocus.com/bid/10617 Bugtraq: 20040703 Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks (Google Search) http://marc.info/?l=bugtraq&m=108887778628398&w=2 http://drponidi.5u.com/advisory.htm XForce ISS Database: cart32-getlatestbuilds-xss(16535) https://exchange.xforce.ibmcloud.com/vulnerabilities/16535
Copyright	Copyright (C) 2004 Noam Rathaus

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.