Unrated severityNVD Advisory· Published May 11, 2005· Updated Apr 16, 2026
CVE-2005-1486
CVE-2005-1486
Description
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php. NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed. The original researcher is known to be unreliable.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- www.digitalparadox.org/advisories/fishc.txtnvdExploit
- www.securityfocus.com/bid/13499nvdExploit
- secunia.com/advisories/15232/nvdVendor Advisory
- marc.infonvd
- www.fishcart.org/archives/200505/msg00028.htmlnvd
- www.osvdb.org/16280nvd
- www.osvdb.org/16281nvd
- www.securityfocus.com/archive/1/457754/100/200/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/20384nvd
News mentions
0No linked articles in our index yet.