CVE-2005-1823
Qualiteam X-Cart 4.0.8 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2005-1823. PoCs published by CENSORED Search Vulnerabilities.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example XSS payload. It lacks executable exploit code but details the attack vectors.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.
Exploits (8)
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example XSS payload. It lacks executable exploit code but details the attack vectors.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example XSS payload. It lacks executable exploit code but details the vulnerability and potential impact.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with example URLs demonstrating the XSS attack vectors. It lacks executable exploit code but provides technical details and attack vectors.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example XSS payload. It lacks executable exploit code but details the vulnerability and potential impact.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with example URLs demonstrating XSS payloads. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example XSS payload. It lacks executable exploit code but details the attack vectors.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with example URLs demonstrating the XSS attack vectors. No actual exploit code is present, only a vulnerability description and proof-of-concept URLs.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example XSS payload. It lacks executable exploit code but outlines the attack vectors.