CVE-2010-1541

Published: Apr 26, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in DFD Cart 1.198, 1.197, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category and (2) list_quantity parameters to index.php, and the (3) category parameter to your.order.php.

Affected (12)

Products: Dragonfrugal: Dfd Cart

Dragonfrugal

1 product

Dfd Cart

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Dragonfrugal Dfd Cart	Up to 1.198
Dragonfrugal Dfd Cart	Version 1.1.4
Dragonfrugal Dfd Cart	Version 1.1.5
Dragonfrugal Dfd Cart	Version 1.1.6
Dragonfrugal Dfd Cart	Version 1.1.7
Dragonfrugal Dfd Cart	Version 1.1.8
Dragonfrugal Dfd Cart	Version 1.192
Dragonfrugal Dfd Cart	Version 1.193
Dragonfrugal Dfd Cart	Version 1.194
Dragonfrugal Dfd Cart	Version 1.195
Dragonfrugal Dfd Cart	Version 1.196
Dragonfrugal Dfd Cart	Version 1.197