Unrated severityNVD Advisory· Published Mar 28, 2005· Updated Jun 16, 2026
CVE-2005-0908
CVE-2005-0908
Description
Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php.
Affected products
2cpe:2.3:a:valdersoft:valdersoft_shopping_cart:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:valdersoft:valdersoft_shopping_cart:3.0:*:*:*:*:*:*:*
- (no CPE)range: = 3.0
Patches
Vulnerability mechanics
References
2- securitytracker.com/idnvdExploitPatchVendor Advisory
- www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2nvdVendor Advisory
News mentions
0No linked articles in our index yet.