CVE-2005-1188

Published: May 2, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to inject arbitrary web script or HTML via the curPage parameter.

Affected (11)

Products: Comersus Open Technologies: Comersus Cart

Comersus Open Technologies

1 product

Comersus Cart

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Comersus Open Technologies Comersus Cart	Version 3.90
Comersus Open Technologies Comersus Cart	Version 4.00
Comersus Open Technologies Comersus Cart	Version 4.051
Comersus Open Technologies Comersus Cart	Version 4.14
Comersus Open Technologies Comersus Cart	Version 4.20b
Comersus Open Technologies Comersus Cart	Version 4.23
Comersus Open Technologies Comersus Cart	Version 4.27
Comersus Open Technologies Comersus Cart	Version 4.28
Comersus Open Technologies Comersus Cart	Version 4.29
Comersus Open Technologies Comersus Cart	Version 4.36
Comersus Open Technologies Comersus Cart	Version 4.47