CVE-2004-0675

Published: Aug 6, 2004Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.

Affected (10)

Products: Mcmurtrey Whitaker And Associates: Cart32

Mcmurtrey Whitaker And Associates

1 product

Cart32

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Mcmurtrey Whitaker And Associates Cart32	Version 2.5a
Mcmurtrey Whitaker And Associates Cart32	Version 2.6
Mcmurtrey Whitaker And Associates Cart32	Version 3.0
Mcmurtrey Whitaker And Associates Cart32	Version 3.1
Mcmurtrey Whitaker And Associates Cart32	Version 3.5
Mcmurtrey Whitaker And Associates Cart32	Version 3.5_build619
Mcmurtrey Whitaker And Associates Cart32	Version 3.5a
Mcmurtrey Whitaker And Associates Cart32	Version 3.5a_build710
Mcmurtrey Whitaker And Associates Cart32	Version 4.4
Mcmurtrey Whitaker And Associates Cart32	Version 5.0